CISA KEV Flags SharePoint Privilege Escalation Bug CVE-2026-56164

THE page describes the Known Exploited Vulnerabilities (KEV) Catalog maintained by CISA to assist the cybersecurity community in managing vulnerabilities exploited in the wild. Organizations are encouraged to use the KEV catalog for prioritization in vulnerability management. It details a specific vulnerability, CVE-2026-56164, affecting Microsoft SharePoint Server, which allows unauthorized elevation of privileges due to missing authentication. The catalog also offers information on updates, recommendations for mitigation, and ways to subscribe for updates on new vulnerabilities.