CVE-2026-62837

This vulnerability is like a trick that lets someone who already has an account on your SharePoint “reach for” files they should not be able to view, and then read confidential information over the network. No one needs to click anything or do anything special for the leak to happen. The risk is mainly about unauthorized account access or misuse of existing access.

This matters if you run Microsoft SharePoint Server and someone can log into it with an authorized account (for example, a compromised employee account or an internal user with the wrong permissions). The flaw is reachable over the network and does not require any user action to trigger. The practical risk is highest when an attacker already has valid access to your SharePoint system.

This is urgent because the weakness allows an attacker with authorized access to remotely steal sensitive information from SharePoint, and the traffic-light verdict for this CVE is RED. While no clear dated “in-the-wild” reporting was provided here, the patch is associated with a new security development and a known threat actor in the provided reporting, so you should not delay upgrading.