CVE-2026-55040

Description

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

Affected Platforms

Weakness Type

CWE-1390

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040
• https://github.com/sfewer-r7/CVE-2026-55040
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-…
• https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-jwt-token-authenticatio…