---
id: "CVE-2026-109455"
page: "https://infrastack.ai/live/CVE-2026-109455"
kind: "vulnerability"
aliases: ["CVE-2026-109455"]
title: "Microsoft SharePoint: incorrect authorization lets an authorized user read data"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Microsoft Office SharePoint", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["microsoft-office", "sharepoint", "vendor"]
not_affected_if: []
published_at: "2026-11-10T19:18:14+00:00"
first_seen_at: "2026-11-10T19:24:23+00:00"
updated_at: "2026-11-10T19:58:08+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109455", "first_seen_at": "2026-11-10T19:24:23+00:00"}]
exploit_sources: []
---

# Microsoft SharePoint: incorrect authorization lets an authorized user read data

Link for people: https://infrastack.ai/live/CVE-2026-109455 (this .md is for agents)

Microsoft Office SharePoint has an incorrect authorization check that lets an attacker who already has an account read information they should not see over the network. The sources give no further detail on what data is exposed.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Office SharePoint affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T19:24:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-109455

## From the sources

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_