CRITICAL
9.0 CVE-2026-109454 Published 10 Nov 2026
Microsoft SharePoint Cross-Site Scripting Spoofing Vulnerability
Worried this affects your website?
Microsoft Office SharePoint contains an improper neutralization of input during web page generation (cross-site scripting) vulnerability.
An authorized attacker could exploit this issue to perform spoofing over a network.
Reference: CVE-2026-109454 on NVD
← Back to Security News