{"id":"CVE-2026-102862","published":"2026-10-13T19:17:50.717","lastModified":"2026-10-14T19:45:31.993","description":"Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-863"],"vendors":["microsoft"],"products":["sharepoint server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102862","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Microsoft SharePoint Server contains an authorization flaw that allows an authenticated user to escalate their privileges across the network, potentially leading to full system compromise. This vulnerability is particularly concerning because it can be exploited remotely without user interaction.","exploitability":"Exploitation requires an authenticated attacker with existing access to SharePoint, but is relatively straightforward since it involves leveraging incorrect authorization checks to gain elevated privileges.","blast_radius":"If exploited, this flaw could allow attackers to gain administrative access across the SharePoint environment, potentially leading to data exfiltration, lateral movement, and complete system compromise.","remediation":"Apply the Microsoft security update KB5042378 for SharePoint Server 2019 or upgrade to SharePoint Server 2021 with the latest cumulative update.","detection":"Monitor for unusual privilege escalation events in SharePoint audit logs, particularly when authenticated users perform actions that should require higher privileges. Look for failed authentication attempts followed by successful elevated access requests.","tags":["authorization","privilege-escalation","sharepoint","remote-exploitation"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:52:59.350Z"}}