---
id: 6158
title: "CVE-2026-45454 — Microsoft SharePoint Server Upload Page Folder Path Traversal to Remote Code Execution"
cve: CVE-2026-45454
source_domain: aretiq.ai
source_url: "https://aretiq.ai/research/vul260531-cve-2026-45454-microsoft-sharepoint-server-upload-page-folder-path-traversal/"
published_at: "2026-06-10T00:00:00Z"
tags: ["rce", "path-traversal", "sharepoint", "webshell", "cve-2026-45454"]
phying_url: "https://phying.com/item/6158"
lang: en
---

# CVE-2026-45454 — Microsoft SharePoint Server Upload Page Folder Path Traversal to Remote Code Execution

## Summary

CVE-2026-45454: path traversal in SharePoint's Upload.aspx lets an authenticated attacker write into restricted libraries like the Master Page Gallery, escalating to RCE via ASPX webshells.

## Intelligence Metadata

- **Sources:** aretiq.ai
- **CVE:** CVE-2026-45454
- **Published:** 2026-06-10T00:00:00Z
- **Original:** https://aretiq.ai/research/vul260531-cve-2026-45454-microsoft-sharepoint-server-upload-page-folder-path-traversal/
- **Phying News:** https://phying.com/item/6158