CVE-2026-47294 is a high-severity (CVSS 8.0) remote code execution vulnerability in Microsoft SharePoint Server. Affected versions include SharePoint Server 2016, 2019, and all versions prior to 16.0.19725.20280. The fix requires an immediate upgrade to version 16.0.19725.20280.
We use optional cookies to improve your experience on our websites, such as through social media connections, and to display personalized advertising based on your online activity. If you reject optional cookies, only cookies necessary to provide you the services will be used. You may change your selection by clicking “Manage Cookies” at the bottom of the page. Privacy Statement Third-Party Cookies AcceptRejectManage cookies MSRC Customer Guidance Security Update Guide Vulnerabilities CVE-2026-47294 Your Privacy Choices Consumer Health Privacy