coldbraid

CVE-2025-49706 Microsoft SharePoint

Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with…

CVSS
not scored

CWE-287

On CISA’s exploited list

Microsoft SharePoint Improper Authentication Vulnerability

Added
2025-07-22
Federal patch deadline
2025-07-23
Ransomware use
known