CVE-2026-85900
8.8HighPublished 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-502
Impact
Authenticated attackers with network access can execute arbitrary code on the SharePoint server. They only need standard authorized user credentials to exploit it.
Root cause
Unsafe deserialization of untrusted data allows remote code execution.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Apply the official security update from Microsoft for your SharePoint version; if patching must wait, restrict network access to the SharePoint portal to trusted internal users only.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85900PatchVendor Advisory