CVE-2026-65660Added 25 Sep 2026
Microsoft SharePoint Code Injection Vulnerability
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.
CISA entry
← Search results
AUTOMATICALLY VERIFIEDOFFICIAL VENDOR SOURCECOLLECTED 26 SEP 2026
Microsoft · AUTOMATIC DISCOVERY
Microsoft SharePoint SharePoint Server 2019
Microsoft SharePoint is tracked by BlackTree as a server-side software product. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
This record passed BlackTree's automatic primary-source checks with a confidence score of 96. It is returned for operational research without requiring routine manual approval. Confirm edition and deployment applicability before acting.
Product overview
Microsoft SharePoint is tracked by BlackTree as a server-side software product. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
Main capabilities
- Networked or application service delivery
- Administrative and operational interfaces
- Versioned maintenance and security updates
Typical use
Used to provide application, infrastructure or operational services to other systems and users.
Deployment
Deployed on servers, virtual machines, containers or managed infrastructure.
This category-level context is generated from the registered product identity. Confirm exact product capabilities on the publisher's page .
Collected lifecycle data
| Product | Microsoft SharePoint |
|---|---|
| Release | SharePoint Server 2019 |
| End of Support | 14 July 2026 |
| Date precision | Day |
Known exploited vulnerabilities
Catalogue updated 1 Oct 2026These are product-family matches in the CISA Known Exploited Vulnerabilities catalogue. Confirm the affected product version in the vendor advisory.
CVE-2026-55040Added 18 Aug 2026
Microsoft SharePoint Weak Authentication Vulnerability
Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network.
CISA entryCVE-2026-50522Added 22 Jul 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.
CISA entryCVE-2026-58644Added 16 Jul 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.
CISA entryCVE-2026-56164Added 14 Jul 2026
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.
CISA entryCVE-2026-45659Added 1 Jul 2026
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.
CISA entryShowing the 6 most recently added of 16 product-family matches.
Package vulnerability advisories
OSV advisories are matched through the registered package URL. A package-family match does not prove that the installed release is affected. Check the affected and fixed versions before remediation.
No package advisories have been linked for this product identity.
This is not evidence that the product has no vulnerabilities.
Source evidence
PRIMARYReady
Microsoft SharePoint official lifecycle source
summary | start | end | title | last_modified | locale | products | display_products | url | SharePoint Server 2019 follows the Fixed Lifecycle Policy. | 2018-10-22T08:00:00Z | 2026-07-15T06:59:59.999Z | SharePoint Server 2019 | 2024-09-27T00:00:00Z | en-us | ['office'] | ['Office'] | /lifecycle/products/sharepoint-server-2019
Official vendor lifecycle or product-change property. Extracted records require human review.
Open official vendor source