Path Traversal Vulnerability in Microsoft Office SharePoint
CVE-2026-70298

6.5MEDIUM

What is CVE-2026-70298?

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to exploit improper limitations placed on directory paths. This security flaw can enable the attacker to traverse the file system, potentially leading to unauthorized access and disclosure of sensitive information over a network. Organizations using affected versions of SharePoint should review and implement the necessary security measures to mitigate potential risks.

Affected Version(s)

Microsoft SharePoint Server Subscription Edition x64-based Systems 16.0.0 < 16.0.20326.20190

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.