cve 2026 56157

The cve 2026 56157 tag covers Microsoft’s authenticated network spoofing vulnerability in SharePoint Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. The flaw is linked to improper access control and can be exploited remotely by an authorized attacker without user interaction to present spoofed content, with potential limited impacts on confidentiality and integrity. Coverage focuses on Microsoft’s fix, the July 14, 2026 SharePoint security updates, and the need for administrators to confirm that every server in a SharePoint farm reaches the patched build level. The tag also reflects vulnerability details corroborated by the National Vulnerability Database.