{"cve":"CVE-2026-63520","enrichment":{"affected":[{"configurations":[{"platform":null,"status":"affected","versions":null}],"enrichment":{"confidence":90.0,"confidence_source":"inferred","scores":[{"score":90.0,"source":"inferred"},{"score":100.0,"source":"matching"}]},"product":"sharepoint_server","vendor":"microsoft"},{"configurations":[{"platform":["x64-based_systems"],"status":"affected","versions":{"scheme":"generic","value":"[16.0.0,16.0.5565.1001)"}}],"enrichment":{"confidence":90.0,"confidence_source":"inferred","scores":[{"score":90.0,"source":"inferred"},{"score":100.0,"source":"matching"}]},"original":{"product":"Microsoft SharePoint Enterprise Server 2016","source":"cna","vendor":"Microsoft"},"product":"sharepoint_server_2016","vendor":"microsoft"},{"configurations":[{"platform":["x64-based_systems"],"status":"affected","versions":{"scheme":"generic","value":"[16.0.0,16.0.10417.20198)"}}],"enrichment":{"confidence":90.0,"confidence_source":"inferred","scores":[{"score":90.0,"source":"inferred"},{"score":100.0,"source":"matching"}]},"original":{"product":"Microsoft SharePoint Server 2019","source":"cna","vendor":"Microsoft"},"product":"sharepoint_server_2019","vendor":"microsoft"},{"configurations":[{"platform":["x64-based_systems"],"status":"affected","versions":{"scheme":"generic","value":"[16.0.0,16.0.19725.20522)"}}],"enrichment":{"confidence":91.0,"confidence_source":"matching","scores":[{"score":91.0,"source":"matching"}]},"original":{"product":"Microsoft SharePoint Server Subscription Edition","source":"cna","vendor":"Microsoft"},"product":"sharepoint_server_subscription_edition","vendor":"microsoft"}],"created":"2026-08-12T17:30:06.645558+00:00","updated":"2026-08-24T17:00:04.362104+00:00","vendors":["microsoft","microsoft$PRODUCT$sharepoint_server","microsoft$PRODUCT$sharepoint_server_2016","microsoft$PRODUCT$sharepoint_server_2019","microsoft$PRODUCT$sharepoint_server_subscription_edition"]},"epss":{"score":0.00956},"mitre":{"cpes":["cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*","cpe:2.3:a:microsoft:sharepoint_server_2016:*:*:*:*:enterprise:*:*:*","cpe:2.3:a:microsoft:sharepoint_server_2019:*:*:*:*:*:*:*:*"],"created":"2026-08-11T17:03:31.370000+00:00","description":"Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"cvssV4_0":{}},"mitre_repo_path":"cves/2026/63xxx/CVE-2026-63520.json","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63520"],"title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","updated":"2026-09-24T13:43:50.366000+00:00","vendors":["microsoft","microsoft$PRODUCT$sharepoint_server","microsoft$PRODUCT$sharepoint_server_2016","microsoft$PRODUCT$sharepoint_server_2019"],"weaknesses":["CWE-20"]},"nvd":{"cpes":["cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*","cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*","cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*"],"created":"2026-08-11T17:18:47.377000+00:00","description":"Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2026/CVE-2026-63520.json","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63520"],"title":null,"updated":"2026-08-13T13:38:30.453000+00:00","vendors":["microsoft","microsoft$PRODUCT$sharepoint_server"],"weaknesses":["CWE-20"]},"opencve":{"changes":[{"created":"2026-08-11T17:15:00+00:00","data":[{"details":{"new":"Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.","old":null},"type":"description"},{"details":{"new":"Microsoft SharePoint Server Remote Code Execution Vulnerability","old":null},"type":"title"},{"details":["microsoft","microsoft$PRODUCT$sharepoint_server","microsoft$PRODUCT$sharepoint_server_2016","microsoft$PRODUCT$sharepoint_server_2019"],"type":"first_time"},{"details":{"added":["CWE-20"],"removed":[]},"type":"weaknesses"},{"details":{"added":["cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*","cpe:2.3:a:microsoft:sharepoint_server_2016:*:*:*:*:enterprise:*:*:*","cpe:2.3:a:microsoft:sharepoint_server_2019:*:*:*:*:*:*:*:*"],"removed":[]},"type":"cpes"},{"details":{"added":["microsoft","microsoft$PRODUCT$sharepoint_server","microsoft$PRODUCT$sharepoint_server_2016","microsoft$PRODUCT$sharepoint_server_2019"],"removed":[]},"type":"vendors"},{"details":{"added":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63520"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"7bad7ce8-7830-42f1-be15-c2c192cf398f"},{"created":"2026-08-11T19:30:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"total"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"2ad547d9-cb63-4a25-bc45-8332ab623cbd"},{"created":"2026-08-13T13:45:00+00:00","data":[{"details":{"added":["cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*","cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*"],"removed":[]},"type":"cpes"}],"id":"e4ee83d0-ed7b-4158-ad5c-e8d4c800eb27"},{"created":"2026-08-17T11:45:00+00:00","data":[{"details":["microsoft$PRODUCT$sharepoint_server_subscription_edition"],"type":"first_time"},{"details":{"added":["microsoft$PRODUCT$sharepoint_server_subscription_edition"],"removed":[]},"type":"vendors"}],"id":"64c70127-f226-47ae-971c-e05f218705b7"}],"cpes":{"data":["cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*","cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*","cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:sharepoint_server_2016:*:*:*:*:enterprise:*:*:*","cpe:2.3:a:microsoft:sharepoint_server_2019:*:*:*:*:*:*:*:*"],"providers":["mitre","nvd"]},"created":{"data":"2026-08-11T17:03:31.370000+00:00","provider":"mitre"},"description":{"data":"Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.00956},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"total"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63520"],"providers":["mitre","nvd"]},"title":{"data":"Microsoft SharePoint Server Remote Code Execution Vulnerability","provider":"mitre"},"updated":{"data":"2026-08-17T11:23:19.652096+00:00","provider":"enrichment"},"vendors":{"data":["microsoft","microsoft$PRODUCT$sharepoint_server","microsoft$PRODUCT$sharepoint_server_2016","microsoft$PRODUCT$sharepoint_server_2019","microsoft$PRODUCT$sharepoint_server_subscription_edition"],"providers":["mitre","nvd","enrichment"]},"weaknesses":{"data":["CWE-20"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2026-08-11T17:03:31.370000+00:00","description":"Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"total"},"version":"2.0.3"}},"references":[],"title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","updated":"2026-08-11T18:27:46.552000+00:00","vendors":[],"vulnrichment_repo_path":"2026/63xxx/CVE-2026-63520.json","weaknesses":[]}}