CRITICAL 9.0 CVE-2026-109454 Published 10 Nov 2026

Microsoft SharePoint Cross-Site Scripting Spoofing Vulnerability

Worried this affects your website?

Microsoft Office SharePoint contains an improper neutralization of input during web page generation (cross-site scripting) vulnerability.

An authorized attacker could exploit this issue to perform spoofing over a network.

Reference: CVE-2026-109454 on NVD

← Back to Security News