{"id":"CVE-2026-69943","published":"2026-10-13T19:19:04.473","lastModified":"2026-10-14T19:45:23.493","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-22"],"vendors":["microsoft"],"products":["sharepoint server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69943","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows authenticated attackers to perform path traversal attacks in SharePoint, enabling them to execute arbitrary code on the server. The flaw occurs because SharePoint doesn't properly limit file paths to restricted directories, allowing attackers to access and execute files outside the intended directory structure.","exploitability":"Exploitation requires an authenticated user account with access to SharePoint, making it moderately difficult but possible for attackers who can obtain valid credentials, with no additional preconditions beyond basic authentication.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on the SharePoint server, potentially leading to full system compromise, data exfiltration, or lateral movement within the network.","remediation":"Upgrade to Microsoft SharePoint Server 2021 CU14 or later, or SharePoint Server 2019 CU20 or later, as these versions contain the fix for this path traversal vulnerability.","detection":"Monitor for unusual file access patterns in SharePoint directories, particularly attempts to read or execute files outside of standard SharePoint content folders, and watch for anomalous network traffic to SharePoint web services with suspicious path traversal sequences in URL parameters.","tags":["path-traversal","rce","sharepoint"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:54:33.315Z"}}