CVE-2026-56164: Microsoft SharePoint Server Missing Authentication for

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability. Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.

• CISA KEV-listed (remediation due 2026-07-17)
• EPSS 26.6% (97.9% percentile)
• CVSS 5.3 medium

Related briefings

• Four SharePoint flaws joined CISA's exploited list in July 2026-08-03
• Microsoft fixes 622 flaws in July, two already under active attack 2026-07-14

Browse the CVE database

Read the full analysis on IntelFusions