MEDIUM CISA KEV

CVE-2026-56164

CVSS v3

5.3

MEDIUM

EPSS Score

7.0%

exploit probability

CISA KEV

Yes

known exploited

Exploitation

—

SSVC status

Description

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

CISA Known Exploited Vulnerability

Date Added
7/14/2026
Patch Due Date
7/17/2026
Ransomware Use
Unknown

Technical details

CVSS v3 Vector
3.1
Published
7/14/2026
Last Modified
7/14/2026

Frequently asked questions

What is CVE-2026-56164?

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

Is CVE-2026-56164 actively exploited?

Yes. CVE-2026-56164 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 7/17/2026.

What is the CVSS score for CVE-2026-56164?

CVE-2026-56164 has a CVSS v3 base score of 5.3 (MEDIUM severity), with vector string 3.1.

Is CVE-2026-56164 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IPSearch CVEs
Back to CVE Database