Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Login

blog.viettelcybersecurity.com | vulnerability | CVE-2026-55040 | #authentication-bypass | #microsoft | #sharepoint | #jwt | #spoofing | #cve-2026-55040

Summary

CVE-2026-55040: SharePoint Server Subscription Edition's token handler skips JWT signature validation, letting attackers forge Bearer tokens and log in as arbitrary accounts, including site admins.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-55040 PoC: Microsoft SharePoint JWT authentication bypass (github.com)
  2. Phân tích lỗ hổng CVE-2022-22005 Microsoft Sharepoint RCE (blog.viettelcybersecurity.com)
  3. SharePoint Vulnerabilities (CVE-2025-53770 & CVE-2025-53771): Everything You Need to Know (wiz.io)
  4. CVE-2026-33112: SharePoint XmlValidator Bypass Enables Low-Privilege RCE (blog.viettelcybersecurity.com)
  5. CVE-2026-20963 Analysis (blog.viettelcybersecurity.com)
  6. SharePoint ToolShell – One Request PreAuth RCE Chain (blog.viettelcybersecurity.com)

back