cve 2026 26114

CVE-2026-26114 is a high-severity remote code execution vulnerability in on-premises Microsoft SharePoint Server, disclosed and patched by Microsoft in March 2026. The flaw is a deserialization of untrusted data issue that allows an attacker with low privileges to execute code over the network. Microsoft's March 10, 2026 security update for SharePoint Server 2016 and other affected SKUs explicitly resolves this CVE. Discussions on WindowsForum.com focus on the technical details of the vulnerability, the importance of applying the patch, and the potential impact on enterprise environments running SharePoint on-premises.