---
id: 7289
title: "CVE-2026-20963 Analysis"
cve: CVE-2026-20963
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/cve-2026-20963-analysis/"
published_at: "2026-04-24T08:52:02Z"
tags: ["rce", "sharepoint", "patch-analysis", "safecontrols", "cve-2026-20963", "register-directive"]
phying_url: "https://phying.com/item/7289"
lang: en
---

# CVE-2026-20963 Analysis

## Summary

CVE-2026-20963: inconsistently normalized TagPrefix values in Register Directives let HTML-encoded whitespace slip past SharePoint SafeControls validation; fixed in the KB5002825 update.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2026-20963
- **Published:** 2026-04-24T08:52:02Z
- **Original:** https://blog.viettelcybersecurity.com/cve-2026-20963-analysis/
- **Phying News:** https://phying.com/item/7289