CVE-2026-45454

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint (affected versions not specified)

Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to execute arbitrary code over a network. Specifically, authenticated users with basic Contribute permissions can upload files, such as ASPX webshells, to restricted document libraries, including the Master Page Gallery. This is achieved through a mismatch in the List and RootFolder variables within the 'Upload.aspx' endpoint, resulting in code execution as the application pool identity.

Recommendations Apply patch KB5002874. Apply patch KB5002880.