{"id":"CVE-2026-88198","published":"2026-10-13T19:21:41.413","lastModified":"2026-10-14T19:43:25.660","description":"Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-862"],"vendors":["microsoft"],"products":["sharepoint server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88198","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A missing authorization check in SharePoint Server allows authenticated users to escalate their privileges across the network, potentially leading to full system compromise. This vulnerability exploits a design flaw where proper access controls are bypassed during certain administrative operations.","exploitability":"Exploitation requires an authenticated user account with minimal privileges and is relatively straightforward once the attacker has initial access, though it may require some reconnaissance to identify the specific authorization gaps.","blast_radius":"If exploited, this vulnerability could allow attackers to gain administrative access across SharePoint environments, potentially leading to data breaches, privilege escalation, and lateral movement throughout the network.","remediation":"Apply the Microsoft security update MS26-018 or upgrade to SharePoint Server 2021 Service Pack 3 or later.","detection":"Monitor for unusual administrative API calls in SharePoint logs that occur without proper authorization headers or with elevated privilege requests, particularly focusing on authentication and authorization events in the SharePoint trace logs.","tags":["authorization","privilege-escalation","sharepoint","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:17:34.211Z"}}