CVE-2026-45659

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Jul 23, 2026

Description

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

Vendor	Product	Versions
Microsoft	Microsoft SharePoint Enterprise Server 2016	>= 16.0.0, < 16.0.5552.1002
Microsoft	Microsoft SharePoint Server 2019	>= 16.0.0, < 16.0.10417.20128
Microsoft	Microsoft SharePoint Server Subscription Edition	>= 16.0.0, < 16.0.19725.20280

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-45659US Government Resource

Timeline

Published: May 22, 2026
Last modified: Jul 23, 2026
Added to CISA KEV: Jul 1, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-45668.8A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a CVE-2026-456605.4Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.22 and 6.18.1, the Glide image proxy's URL validation c CVE-2026-456619.9Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerability exists in Dokp CVE-2026-456628.8Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.0 and earlier, the deleteRegistry function in Dokploy (packages/serve CVE-2026-456639.9Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.1 and earlier, a command injection vulnerability exists in the Docker CVE-2026-456645.3ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, bec CVE-2026-456658.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, a Stored Cross-Site Scrip CVE-2026-456666.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the API /api/v1/notes/{n CVE-2026-456676.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, GET /api/v1/memories/ef i CVE-2026-456689.3Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Prior to 0.102.2 CVE-2026-456695.4Nuxt is an open-source web development framework for Vue.js. From versions 3.4.3 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6, navigat CVE-2026-45679.8A vulnerability has been found in Tenda A15 15.13.07.13. The impacted element is the function UploadCfg of the file /cgi-bin/UploadCfg. The