CVE-2026-62826

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Server Subscription Edition (affected versions not specified) Microsoft SharePoint Enterprise Server 2016

Description An issue exists due to improper neutralization of input during web page generation, leading to cross-site scripting (XSS). This allows an authorized remote attacker to perform spoofing by executing attacker-controlled scripts within a user's browser.

Recommendations Upgrade Microsoft SharePoint Enterprise Server 2016 to a vendor-listed fixed release. At the moment, there is no information about a newer version that contains a fix for this vulnerability for Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition.