CVE-2026-70266— Microsoft Office SharePoint Elevation of Privilege Vulnerability

Quick assessment

Copy summary Copy citation

Affected

Microsoft Microsoft SharePoint Server Subscription Edition

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Microsoft Office SharePoint 中，对 SQL 命令中使用的特殊元素缺乏适当的处理（即“SQL 注入”漏洞），可能导致经过身份验证的攻击者通过网络提升其权限。

CVE-2026-70266 affects Microsoft Microsoft SharePoint Server Subscription Edition. No confirmed in-the-wild exploitation; assess based on exposure. 在 Microsoft Office SharePoint 中，对 SQL 命令中使用的特殊元素缺乏适当的处理（即“SQL 注入”漏洞），可能导致经过身份验证的攻击者通过网络提升其权限。 CVE-2026-70266 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-70266

I. Basic Information for CVE-2026-70266

Affected Products

II. Public POCs for CVE-2026-70266

III. Intelligence Information for CVE-2026-70266

Vendor Advisories for CVE-2026-70266 (1)

• 🔗 CVE-2026-70266 - Security Update Guide - Microsoft - Microsoft Office SharePoint Elevation of Privilege Vulnerability Read full article vendor-advisory patch

• https://www.cve.org/CVERecord?id=CVE-2026-70266

Same Patch Batch · Microsoft · 2026-10-13 · 1407 CVEs total

Showing top 20 of 1407 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2026-70266