HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-57105 — Improper neutralization of input during web page generation ('cross-site scripti...

·Source: NIST NVD

Updated:

Executive Summary

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Analysis

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CVSS Score: 8. Published: 2026-08-11T17:18:04.740.

Indicators of Compromise (1)

CVE (1)
CVE-2026-57105
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

HIGHVulnerabilityNEW

CISA KEV: Ray-Project Ray — Ray-Project Ray Code Injection Vulnerability

Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.

CVE-2025-62593Ray-Project Ray
CISA KEV
MEDIUMVulnerability

Video Call Exploit Chains Two Flaws in Unisoc Modems

Researchers found that by combining two vulnerabilities, they could take over an Android device by delivering a payload and getting the victim to answer their phone.

Dark Reading
CRITICALVulnerability

NVD CRITICAL: CVE-2026-75110 — MemOS is a memory operating system for LLMs and AI agents. In deployments where ...

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open: os.getenv("INTERNAL_SERVICE_SECRET") returns None and a request omitting the X-Internal-Service header al

CVE-2026-75110
NIST NVD