非影资讯
P非影 English
面向安全从业者的中英双语安全研究与漏洞情报精选。

CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Login

blog.viettelcybersecurity.com | 漏洞 | CVE-2026-55040 | #authentication-bypass | #microsoft | #sharepoint | #jwt | #spoofing | #cve-2026-55040

摘要

CVE-2026-55040：SharePoint Server Subscription Edition 的令牌处理器跳过 JWT 签名校验，攻击者可伪造 Bearer 令牌，以任意账户（包括站点管理员）登录。
发布时间
收录时间

原文 ↗

相关内容

  1. CVE-2026-55040 PoC：Microsoft SharePoint JWT 认证绕过 (github.com)
  2. CVE-2022-22005 Microsoft SharePoint RCE 漏洞分析 (blog.viettelcybersecurity.com)
  3. SharePoint 漏洞（CVE-2025-53770 与 CVE-2025-53771）：一文读懂 (wiz.io)
  4. CVE-2026-33112: SharePoint XmlValidator Bypass Enables Low-Privilege RCE (blog.viettelcybersecurity.com)
  5. CVE-2026-20963 Analysis (blog.viettelcybersecurity.com)
  6. SharePoint ToolShell – One Request PreAuth RCE Chain (blog.viettelcybersecurity.com)

返回