CVE-2026-20951

Microsoft SharePoint Server Remote Code Execution Vulnerability

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

We have discovered 3,378 live websites that are affected by CVE-2026-20951.

Run a Free Instant Scan



Affected Software

Product  Microsoft SharePoint
Category Content Management System
Vulnerable Domains3,378 live websites (68% of Microsoft SharePoint install base)
Vulnerable Versions
  • from 16 through 16.0.5535.1001
Vulnerable Versions Count92 versions ( 43% of all versions)


Common Weakness Enumeration

CWE-20 Improper Input Validation



Details

  • Published - Jan 13, 2026
  • Updated - Jan 30, 2026

Website Distribution by Country

Number of websites using CVE-2026-20951
United States1,324 websites


Canada149 websites
Turkey143 websites
Germany120 websites
Brunei101 websites
France99 websites
Colombia98 websites
Saudi Arabia95 websites
Vietnam91 websites
Australia79 websites

Website Distribution by TLD

Number of websites using CVE-2026-20951
.com675 websites
.org321 websites
.ca120 websites
.de111 websites
.edu105 websites
.net98 websites
.fr76 websites
.es60 websites
.dk47 websites
.it44 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-20951

Top websites that are affected by CVE-2026-20951. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
********.****.com United States***
***.int Switzerland*,***
**********.dk Denmark*,***
******.gov United States*,***
****.**.gov United States*,***
***************.org United States*,***
****.eu Denmark**,***
**********.***.es Spain**,***
*********.***.es Spain**,***
******.***.***.au Australia**,***
See full domain list

FAQ

CVE-2026-20951 is Improper Input Validation in Microsoft SharePoint
A total of 3,378 websites have been identified as vulnerable to CVE-2026-20951, based on global website indexing conducted by WebTechSurvey.
The Microsoft SharePoint is affected by the CVE-2026-20951 vulnerability.
Microsoft SharePoint versions up to 16.0.5535.1001 are vulnerable to CVE-2026-20951.
CVE-2026-20951 is resolved in version 16.0.5535.1001 of Microsoft SharePoint.