CVE-2026-20947

CVE-2026-20947 is a critical SQL injection vulnerability affecting Microsoft Office SharePoint Server. An authenticated attacker can exploit this flaw over a network to achieve remote code execution. This vulnerability carries a high CVSS score of 8.8, indicating a low attack complexity and significant potential for high impact on confidentiality, integrity, and availability. While there is no public exploit code or evidence of active exploitation, the vulnerability has garnered substantial community discussion and media coverage, suggesting heightened awareness and potential for future exploitation.