CVE-2026-56164 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Affected Products (NVD)

Vendor	Product	Version
microsoft	sharepoint_server	𝑥 < 16.0.19725.20434

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-306 - Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Vulnerability Media Exposure

[ENGLISH] Patchpocalypse Now: Microsoft tops last month's record with 622 Patch Tuesday CVEs
Remember when last month's 206 CVEs seemed eye-watering? Yeah, those were the days
Published: 2026-07-14T22:49:40+02:00
[ENGLISH] Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft's own CVEs by its Security Update Guide count, more than triple June's previous high of around 200. Those two live bugs are the ones to grab first. Microsoft credits incident responders for both. Both are
Published: 2026-07-15T01:55:47+05:30
[ENGLISH] Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days
Today is Microsoft's July 2026 Patch Tuesday, and with it comes security updates for a record-breaking 570 flaws, including two zero-day vulnerabilities exploited in attacks and one publicly disclosed. [...]
Published: 2026-07-14T14:01:36-04:00

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56164