Vulnerability intelligence

CVE-2026-63520

Microsoft Microsoft SharePoint Enterprise Server 2016 CWE-20

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

CVSS Score

8.1

High

EPSS — Exploit Probability

1.0%

Riskier than 60% of all CVEs · checked 2026-09-24

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

5 articles across 3 outlets · first covered Aug 11, 2026 · latest Aug 25, 2026

Coverage timeline

Critical SharePoint RCE and Auth Bypass Flaws Actively Exploited
securityonline.info · Aug 25, 2026
Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
www.rapid7.com · Aug 25, 2026
SharePoint Auth Bypass Flaw CVE-2026-55040 Under Active Attack
www.securityweek.com · Aug 12, 2026
Microsoft Fixes 421 Flaws Including SharePoint Zero Day
www.rapid7.com · Aug 12, 2026
Rapid7 Finds Critical SharePoint RCE Flaw Tied to Auth Bypass
www.rapid7.com · Aug 11, 2026

Related CVEs — Microsoft

CVE-2026-65660KEV CVE-2026-85880KEV CVE-2025-32711 CVE-2019-0708KEV CVE-2020-0688KEV CVE-2026-85921 CVE-2026-55945 CVE-2026-62721