CVE-2026-97782 Microsoft CVE debrief

Who should care

Defenders responsible for Microsoft SharePoint Server Subscription Edition deployments should assess exposure to tampering attacks and verify network access controls and authentication mechanisms for SharePoint. They should also monitor for suspicious activity and implement compensating controls as needed. Additionally, defenders should review and assess exposure of Microsoft SharePoint Server Subscription Edition to

Why it matters

CVE-2026-97782 Microsoft Office SharePoint Tampering Vulnerability allows an authorized attacker to perform tampering over a network. Defenders responsible for Microsoft SharePoint Server Subscription Edition deployments should assess exposure to tampering attacks and verify network access controls and authentication mechanisms for SharePoint.

• Verify network access controls and authentication mechanisms for SharePoint
• Monitor for suspicious activity and implement compensating controls as needed
• Assess exposure of Microsoft SharePoint Server Subscription Edition to tampering attacks

Technical summary

The vulnerability allows an authorized attacker to perform tampering over a network in Microsoft Office SharePoint. This is a tampering vulnerability that affects Microsoft SharePoint Server Subscription Edition. The CVSS score for this vulnerability is 6.8, indicating a MEDIUM severity level. Defenders should assess exposure to tampering attacks and verify network access controls and authentication mechanisms for SharePoint.

Defensive priority

Assess exposure of Microsoft SharePoint Server Subscription Edition to tampering attacks.

Recommended defensive actions

• Review and assess exposure of Microsoft SharePoint Server Subscription Edition to tampering attacks
• Verify network access controls and authentication mechanisms for SharePoint
• Monitor for suspicious activity and implement compensating controls as needed

Evidence notes

Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. The source item for CVE-2026-97782 provides additional information about the vulnerability. Official CVE Program record with source-provided CVE metadata and Official NIST NVD detail page and source-specific vulnerability assessment are available for further details.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.