CVE-2026-65660

HIGH CISA KEV 2 PoCs

ACT NOW Priority: 0.72 BB Relevance: 79/100

Published: 2026-08-11 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network

AC: Low

PR: Low

UI: None

S: Unchanged

C: High

I: High

A: High

Description

Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — SharePoint

Date Added 2026-09-25

Remediation Due 2026-09-28

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65660 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-65660

Weakness Classification (1)

CWE-94 — CWE-94: Improper Control of Generation of Code ('Code Injection')

Affected Software (9)

Vendor	Product	Version
Microsoft	Microsoft SharePoint Enterprise Server 2016	16.0.0 < 16.0.5565.1001
Microsoft	Microsoft SharePoint Enterprise Server 2016	16.0.0 < 16.0.5565.1001
Microsoft	Microsoft SharePoint Server 2019	16.0.0 < 16.0.10417.20198
Microsoft	Microsoft SharePoint Server 2019	16.0.0 < 16.0.10417.20198
Microsoft	Microsoft SharePoint Server Subscription Edition	16.0.0 < 16.0.19725.20522
Microsoft	Microsoft SharePoint Server Subscription Edition	16.0.0 < 16.0.19725.20522
microsoft	sharepoint_server	< 16.0.19725.20522
microsoft	sharepoint_server	2016
microsoft	sharepoint_server	2019