---
id: 8529
title: "SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypass"
cve: CVE-2026-65660
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/sharepoint_cve-2026-65660/"
published_at: "2026-09-22T03:03:00Z"
tags: ["rce", "pre-auth", "sharepoint", "cve-2026-65660", "safecontrols-bypass", "in-memory-webshell", "type-check-bypass"]
phying_url: "https://phying.com/item/8529"
lang: en
---

# SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypass

## Summary

Breakdown of CVE-2026-65660, a SafeControls type-check bypass in SharePoint. It shows an in-memory webshell technique chaining into pre-auth RCE, affecting all versions through Subscription Edition.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2026-65660
- **Published:** 2026-09-22T03:03:00Z
- **Original:** https://blog.viettelcybersecurity.com/sharepoint_cve-2026-65660/
- **Phying News:** https://phying.com/item/8529