CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-56164 — Missing authentication for critical function in Microsoft Office SharePoint allo...

·Source: NIST NVD

Updated:

Executive Summary

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

Analysis

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. CVSS Score: 5.3. Published: 2026-07-14T17:17:09.907.

Indicators of Compromise (1)

CVE (1)
CVE-2026-56164
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 14, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-65057 — Keep (commit 91c75e0) contains a server-side request forgery vulnerability that ...

Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unprotected healthcheck endpoint. Attackers can send a crafted JSON payload with a malicious host parameter to cause the backend to issue outbound requests to internal services or cloud

CVE-2026-65057
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-63764 — lmdeploy's OpenAI-compatible API server contains a server-side request forgery v...

lmdeploy's OpenAI-compatible API server contains a server-side request forgery vulnerability that allows unauthenticated attackers to access internal services and cloud metadata endpoints by supplying a crafted image_url that redirects to internal targets. Attackers can send a POST request to the chat completions endpoint with an image_url pointing to an attacker-controlled server that responds wi

CVE-2026-63764
NIST NVD
CRITICALVulnerability

Critical SharePoint RCE flaw exploited to steal machine keys

Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. [...]

CVE-2026-50522
BleepingComputer