CVE-2026-55019

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

We have discovered 3,135 live websites that are affected by CVE-2026-55019.

Run a Free Instant Scan



Affected Software

Product  Microsoft SharePoint
Category Content Management System
Vulnerable Domains3,135 live websites (72% of Microsoft SharePoint install base)
Vulnerable Versions
  • from 16 through 16.0.5561.1001
Vulnerable Versions Count81 versions ( 41% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Jul 14, 2026
  • Updated - Jul 30, 2026

Website Distribution by Country

Number of websites using CVE-2026-55019
United States1,271 websites


Turkey172 websites
Canada128 websites
Germany114 websites
France94 websites
Brunei88 websites
Saudi Arabia83 websites
Australia70 websites
Italy68 websites
Colombia68 websites

Website Distribution by TLD

Number of websites using CVE-2026-55019
.com695 websites
.org283 websites
.de104 websites
.ca102 websites
.edu93 websites
.net84 websites
.es62 websites
.fr60 websites
.it42 websites
.dk41 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-55019

Top websites that are affected by CVE-2026-55019. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
********.****.com United States***
***.int Switzerland*,***
**********.dk Denmark*,***
******.gov United States*,***
****.**.gov United States*,***
***************.org United States*,***
***********.***.au Australia*,***
****.eu Denmark**,***
**********.***.es Spain**,***
*********.***.es Spain**,***
See full domain list

FAQ

CVE-2026-55019 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Microsoft SharePoint
A total of 3,135 websites have been identified as vulnerable to CVE-2026-55019, based on global website indexing conducted by WebTechSurvey.
The Microsoft SharePoint is affected by the CVE-2026-55019 vulnerability.
Microsoft SharePoint versions up to 16.0.5561.1001 are vulnerable to CVE-2026-55019.
CVE-2026-55019 is resolved in version 16.0.5561.1001 of Microsoft SharePoint.