CVE Catalog

CVE-2026-45454

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

38th percentile - higher than 38% of all known CVEs

Summary

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Risk Assessment

An attacker with appropriate permissions can exploit this vulnerability to execute code remotely, posing a serious security threat to the system.

Recommendation

It is recommended to update Microsoft Office SharePoint to the latest version and implement additional security measures to restrict access to restricted directories.

Original NVD description (English source)

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS