CVE-2026-65660HighKEV

CVE-2026-65660

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

TCL Priority

CVSS

8.8

EPSS

KEV

Yes

Exploitation

reported

Timeline

CVE Published
81d ago · NVD
Added to TCL Advisory
36d ago · TCL Advisory
Added to CISA KEV
36d ago · CISA
Exploitation Status Changed
36d ago · TCL Advisory

What Changed?

Exploitationunknown→reportedcisa_kev

KEVNO→YEScisa_kev

Sources

NVD · Updated 36d ago

CISA KEV · Updated 37d ago

References

secure@microsoft.com 134c704f-9b21-4f2e-91b3-4a467353bcc0 134c704f-9b21-4f2e-91b3-4a467353bcc0