High (8.8) in microsoft. EPSS 9.6% chance of exploitation in the next 30 days.
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
Severity
CVSS 3.0
8.8 high
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
9.6% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)