Path Traversal Vulnerability in Microsoft Office SharePoint
CVE-2026-69943

8.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Sharepoint Enterprise Server 2016
Microsoft Sharepoint Server 2019
Microsoft Sharepoint Server Subscription Edition
Vendor
CVE Published:
13 October 2026

What is CVE-2026-69943?

In Microsoft Office SharePoint, a path traversal vulnerability exists due to improper validation of pathname inputs. This flaw enables an authorized user to potentially execute arbitrary code on a networked system, thereby posing a risk of unauthorized access to sensitive data or functionality. This vulnerability highlights the importance of stringent input validation protocols to safeguard systems against exploitation.

Affected Version(s)

Microsoft SharePoint Enterprise Server 2016 x64-based Systems -

Microsoft SharePoint Server 2019 x64-based Systems -

Microsoft SharePoint Server Subscription Edition x64-based Systems 16.0.0 < 16.0.20326.20190

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.