非影资讯
P非影 English
面向安全从业者的中英双语安全研究与漏洞情报精选。

CVE-2026-20963 Analysis

blog.viettelcybersecurity.com | 漏洞 | CVE-2026-20963 | #rce | #sharepoint | #patch-analysis | #safecontrols | #cve-2026-20963 | #register-directive

摘要

CVE-2026-20963：Register 指令中 TagPrefix 的规范化处理不一致，HTML 编码的空白可绕过 SharePoint SafeControls 校验；已在 KB5002825 更新中修复。
发布时间
收录时间

原文 ↗

相关内容

  1. Phân tích CVE-2026-20963 (blog.viettelcybersecurity.com)
  2. CVE-2022-22005 Microsoft SharePoint RCE 漏洞分析 (blog.viettelcybersecurity.com)
  3. CVE-2026-33112: SharePoint XmlValidator Bypass Enables Low-Privilege RCE (blog.viettelcybersecurity.com)
  4. SharePoint ToolShell – One Request PreAuth RCE Chain (blog.viettelcybersecurity.com)
  5. SharePoint Unknown CVE Unveiled: RCE via WebPart Properties Deserialization (blog.viettelcybersecurity.com)
  6. CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Login (blog.viettelcybersecurity.com)

返回