{"id":"CVE-2026-124210","kind":"vulnerability","aliases":["CVE-2026-124210"],"related":[],"title":"Microsoft SharePoint: authenticated SSRF lets an attacker read internal information","description":"Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.","summary":"Microsoft Office SharePoint has a server-side request forgery flaw that lets a signed-in user make the server send requests to places it should not reach. An attacker with an account can use this to disclose information over the network.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["microsoft-office","on-premises","sharepoint","vendor"],"not_affected_if":["sharepoint-online"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:48+00:00","first_seen_at":"2026-11-10T19:25:13+00:00","triaged_at":"2026-11-10T19:56:12+00:00","updated_at":"2026-11-10T19:56:12+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-10T19:56:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft SharePoint: authenticated SSRF lets an attacker read internal information","impact":"medium","summary":"Microsoft Office SharePoint has a server-side request forgery flaw that lets a signed-in user make the server send requests to places it should not reach. An attacker with an account can use this to disclose information over the network.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["sharepoint","microsoft-office","on-premises"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker reads information from internal network services via the server","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-124210 for affected versions, fixed builds and whether SharePoint Online is affected.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["sharepoint-online"],"who_is_affected":"Organizations running Microsoft SharePoint (on-premises Office SharePoint) where users have accounts. The sources do not state which SharePoint versions or configurations are affected, so unknown beyond that.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000674,"input_tokens":4502,"output_tokens":448,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-124210':13A,16A '-2026':12A,15A 'account':58B 'allow':78C 'attack':7A,55B,81C 'authent':3A 'author':80C 'cve':11A,14A 'disclos':63B,83C 'flaw':35B 'forgeri':34B,72C 'inform':10A,64B,84C 'intern':9A 'let':5A,37B 'make':43B 'microsoft':1A,18B,25B,75C 'microsoft-offic':17B 'network':67B,87C 'offic':19B,26B,76C 'on-premis':20B 'place':49B 'premis':22B 'reach':53B 'read':8A 'request':33B,47B,71C 'send':46B 'server':31B,45B,69C 'server-sid':30B,68C 'sharepoint':2A,23B,27B,77C 'side':32B,70C 'sign':40B 'signed-in':39B 'ssrf':4A,73C 'use':60B 'user':42B 'vendor':24B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Microsoft SharePoint (on-premises Office SharePoint) where users have accounts. The sources do not state which SharePoint versions or configurations are affected, so unknown beyond that.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium","microsoftoffice","onpremises","sharepoint","vendor"],"campaign_type":null,"search_a":"'-124210':13A,16A '-2026':12A,15A 'attack':7A 'authent':3A 'cve':11A,14A 'inform':10A 'intern':9A 'let':5A 'microsoft':1A 'read':8A 'sharepoint':2A 'ssrf':4A","search_b":"'account':58B 'attack':55B 'disclos':63B 'flaw':35B 'forgeri':34B 'inform':64B 'let':37B 'make':43B 'microsoft':18B,25B 'microsoft-offic':17B 'network':67B 'offic':19B,26B 'on-premis':20B 'place':49B 'premis':22B 'reach':53B 'request':33B,47B 'send':46B 'server':31B,45B 'server-sid':30B 'sharepoint':23B,27B 'side':32B 'sign':40B 'signed-in':39B 'use':60B 'user':42B 'vendor':24B","search_c":"'allow':78C 'attack':81C 'author':80C 'disclos':83C 'forgeri':72C 'inform':84C 'microsoft':75C 'network':87C 'offic':76C 'request':71C 'server':69C 'server-sid':68C 'sharepoint':77C 'side':70C 'ssrf':73C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124210","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124210","severity":null,"published_at":"2026-11-10T19:20:48+00:00","modified_at":"2026-11-10T19:20:48+00:00","first_seen_at":"2026-11-10T19:25:13+00:00","fetched_at":"2026-11-10T19:25:13+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}