cve 2026 54108

The cve 2026 54108 tag covers Microsoft’s security response to an Important-rated SharePoint Server spoofing vulnerability. The flaw can allow a low-privileged, authenticated attacker to spoof content over a network and potentially expose confidential information. Coverage focuses on the July 14, 2026 security updates for SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. The vulnerability has a CVSS 3.1 base score of 6.5. Microsoft has not identified CVE-2026-54108 as publicly disclosed or exploited in the wild, based on the cited July update assessment, but affected SharePoint administrators should review and apply the applicable patches.