Path Traversal Vulnerability in Microsoft Office SharePoint
CVE-2026-70298
6.5MEDIUM
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 13 October 2026
What is CVE-2026-70298?
A vulnerability in Microsoft Office SharePoint allows an authorized attacker to exploit improper limitations placed on directory paths. This security flaw can enable the attacker to traverse the file system, potentially leading to unauthorized access and disclosure of sensitive information over a network. Organizations using affected versions of SharePoint should review and implement the necessary security measures to mitigate potential risks.
Affected Version(s)
Microsoft SharePoint Server Subscription Edition x64-based Systems 16.0.0 < 16.0.20326.20190