Microsoft SharePoint Known Exploited Vulnerability - 20260319001¶
Overview¶
The WASOC has observed a Microsoft vulnerability affecting SharePoint Server being added to the CISA Known Exploited Vulnerability catalog. Successful exploitation could allow an authenticated attacker to execute arbitrary code and compromise affected systems.
What is vulnerable?¶
| Product(s) Affected | Version(s) | CVE | CVSS | Severity |
|---|---|---|---|---|
| Microsoft SharePoint Server | Vendor listed affected versions | CVE-2026-20963 | 8.8 | High |
What has been observed?¶
CISA has added one or more of the mentioned items to their Known Exploited Vulnerability catalog. The WASOC has not received any reports of exploitation of this vulnerability on Western Australian Government networks at the time of writing.
Recommendation¶
The WASOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframes (refer Patch Management):