Medium5.4Vendor: HighMicrosoft Server Updated

Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-48560 Published Jun 9, 2026

CVE-2026-48560

Affected products & platforms

Microsoft ServerSharePoint Server

Summary

Microsoft SharePoint Server Spoofing Vulnerability Affected products named by the advisory: Microsoft SharePoint Enterprise Server 2016; Microsoft SharePoint Server 2019; Microsoft SharePoint Server Subscription Edition.

Fixed versions

KB5002880 (build 16.0.5556.1005)
KB5002874 (build 16.0.10417.20153)
KB5002873 (build 16.0.19725.20384)

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Install the applicable security update for your platform: KB5002880, KB5002874, KB5002873 (see the Microsoft Update Catalog).

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Source evidence

What VulniPulse actually used to build this record — and why.

Microsoft Security Update Guide (MSRC)official
Official vendor feed — the source of truth for this advisory. VulniPulse polled this feed and parsed this entry from it.
Microsoft Server
Vendor advisory pageofficial
Advisory page fetched and parsed to extract affected/fixed versions and mitigation guidance beyond what the feed carries.
Microsoft Server

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2026-48560NVD CVE.org MITRE

Official resources

Microsoft Update Catalog: KB5002880
Official documentation
Direct download of the KB5002880 security update named in the MSRC remediation data for this CVE.
Microsoft Update Catalog: KB5002874
Official documentation
Direct download of the KB5002874 security update named in the MSRC remediation data for this CVE.
Microsoft Update Catalog: KB5002873
Official documentation
Direct download of the KB5002873 security update named in the MSRC remediation data for this CVE.
MSRC Security Update Guide
Official documentation
Filter by this CVE for per-product KB numbers, severity and exploitability assessment.

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-48560 Published Jun 9, 2026

Affected products & platforms

Microsoft ServerSharePoint Server

Summary

Fixed versions

KB5002880 (build 16.0.5556.1005)
KB5002874 (build 16.0.10417.20153)
KB5002873 (build 16.0.19725.20384)

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Install the applicable security update for your platform: KB5002880, KB5002874, KB5002873 (see the Microsoft Update Catalog).

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Source evidence

What VulniPulse actually used to build this record — and why.

Microsoft Security Update Guide (MSRC)official
Official vendor feed — the source of truth for this advisory. VulniPulse polled this feed and parsed this entry from it.
Microsoft Server
Vendor advisory pageofficial
Advisory page fetched and parsed to extract affected/fixed versions and mitigation guidance beyond what the feed carries.
Microsoft Server

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2026-48560NVD CVE.org MITRE

Official resources

Microsoft Update Catalog: KB5002880
Official documentation
Direct download of the KB5002880 security update named in the MSRC remediation data for this CVE.
Microsoft Update Catalog: KB5002874
Official documentation
Direct download of the KB5002874 security update named in the MSRC remediation data for this CVE.
Microsoft Update Catalog: KB5002873
Official documentation
Direct download of the KB5002873 security update named in the MSRC remediation data for this CVE.
MSRC Security Update Guide
Official documentation
Filter by this CVE for per-product KB numbers, severity and exploitability assessment.

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.