{"id":"CVE-2026-102860","published":"2026-10-13T19:17:50.470","lastModified":"2026-10-14T19:45:26.560","description":"Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-284"],"vendors":["microsoft"],"products":["sharepoint server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102860","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"SharePoint's improper access control allows authenticated users to elevate their privileges across the network, potentially leading to full system compromise. This flaw enables attackers to gain higher-level permissions without additional authentication.","exploitability":"Exploitation requires an authenticated user account with existing SharePoint access, making it moderately difficult but not highly complex to achieve privilege escalation.","blast_radius":"If exploited, this vulnerability could allow widespread unauthorized access to SharePoint resources, potentially affecting thousands of users and enabling lateral movement throughout the network.","remediation":"Apply the Microsoft security update KB5042187 for SharePoint Server 2019 or upgrade to SharePoint Server 2021 with the latest cumulative update.","detection":"Monitor for unusual privilege elevation events in SharePoint audit logs, particularly when users access administrative functions without prior elevated permissions. Look for failed authentication attempts followed by successful privilege escalation actions.","tags":["access-control","privilege-escalation","sharepoint","authentication"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:52:46.998Z"}}