High (8.8) in microsoft. EPSS 69% chance of exploitation in the next 30 days.
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
Severity
CVSS 3.1
8.8 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
69% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)