[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-55040":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-20T09:42:37.395Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":37,"duplicate_of":9,"upstream":38,"downstream":39,"duplicates":40,"related":41,"reserved_at":9,"published_at":42,"modified_at":43,"state":44,"summary":45,"references_raw":55,"kevs":78,"epss":89,"epss_history":92,"metrics":204,"affected":213},"CVE-2026-55040","Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-1390","Weak Authentication","The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.","weakness","Incomplete","Class",[],[20,29],{"_key":21,"name":22,"source":23,"url":24,"maturity":25,"reliability_score":26,"verified":27,"type":9,"platforms":28,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_SFEWER-R7_CVE-2026-55040","Cve 2026 55040","github","https://github.com/sfewer-r7/CVE-2026-55040","poc",0.3,false,[],{"_key":30,"name":31,"source":32,"url":33,"maturity":34,"reliability_score":35,"verified":27,"type":9,"platforms":36,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_94F64EE99643E7E9","Exploit Reference (cisa.gov)","reference","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-55040","unknown",0.2,[],[],[],[],[],[],"2026-07-14T17:09:00.641Z","2026-08-19T16:30:16.397Z","Analyzed",{"cisa_kev":46,"cisa_ransomware":27,"cisa_vendor":47,"epss_severity":48,"epss_score":49,"severity":50,"severity_score":51,"severity_version":52,"severity_source":53,"severity_vector":54,"severity_status":44},true,"Microsoft","low",0.05489,"critical",9.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C",[56,63,69,73],{"url":57,"sources":58,"tags":60},"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040",[53,59],"nvd",[61,62],"Vendor Advisory","Patch",{"url":64,"sources":65,"tags":66},"https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-jwt-token-authentication-bypass-cve-2026-55040/",[53,59],[67,68],"Technical Description","US Government Resource",{"url":24,"sources":70,"tags":71},[53,59],[72],"Exploit",{"url":33,"sources":74,"tags":75},[53,59],[76,72,77],"Government Resource","Third Party Advisory",[79],{"source":80,"vendor":47,"product":81,"date_added":82,"vulnerability_name":83,"short_description":84,"required_action":85,"due_date":86,"known_ransomware_campaign_use":87,"notes":88,"exploitation_type":9},"cisa","SharePoint","2026-08-18","Microsoft SharePoint Weak Authentication Vulnerability","Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-08-21","Unknown","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-55040",{"date":90,"score":49,"percentile":91},"2026-08-19",0.92135,[93,97,101,104,107,110,113,116,119,122,126,129,132,135,138,141,145,148,151,154,157,160,163,166,169,172,175,178,181,184,188,192,195,198,201,203],{"date":94,"score":95,"percentile":96},"2026-07-15",0.00682,0.48307,{"date":98,"score":99,"percentile":100},"2026-07-16",0.00668,0.47742,{"date":102,"score":99,"percentile":103},"2026-07-17",0.47758,{"date":105,"score":99,"percentile":106},"2026-07-18",0.47775,{"date":108,"score":99,"percentile":109},"2026-07-19",0.47777,{"date":111,"score":99,"percentile":112},"2026-07-20",0.47838,{"date":114,"score":99,"percentile":115},"2026-07-21",0.47863,{"date":117,"score":99,"percentile":118},"2026-07-22",0.48064,{"date":120,"score":99,"percentile":121},"2026-07-23",0.48084,{"date":123,"score":124,"percentile":125},"2026-07-24",0.01348,0.68511,{"date":127,"score":124,"percentile":128},"2026-07-25",0.68545,{"date":130,"score":124,"percentile":131},"2026-07-26",0.68541,{"date":133,"score":124,"percentile":134},"2026-07-27",0.68539,{"date":136,"score":124,"percentile":137},"2026-07-28",0.68575,{"date":139,"score":124,"percentile":140},"2026-07-29",0.68595,{"date":142,"score":143,"percentile":144},"2026-07-30",0.01626,0.73766,{"date":146,"score":143,"percentile":147},"2026-07-31",0.73784,{"date":149,"score":143,"percentile":150},"2026-08-01",0.73791,{"date":152,"score":143,"percentile":153},"2026-08-02",0.73797,{"date":155,"score":143,"percentile":156},"2026-08-03",0.73802,{"date":158,"score":143,"percentile":159},"2026-08-04",0.73811,{"date":161,"score":143,"percentile":162},"2026-08-05",0.73829,{"date":164,"score":143,"percentile":165},"2026-08-06",0.73845,{"date":167,"score":143,"percentile":168},"2026-08-07",0.73875,{"date":170,"score":143,"percentile":171},"2026-08-08",0.73879,{"date":173,"score":143,"percentile":174},"2026-08-09",0.73876,{"date":176,"score":143,"percentile":177},"2026-08-10",0.73882,{"date":179,"score":143,"percentile":180},"2026-08-11",0.73924,{"date":182,"score":143,"percentile":183},"2026-08-12",0.73981,{"date":185,"score":186,"percentile":187},"2026-08-13",0.0296,0.8597,{"date":189,"score":190,"percentile":191},"2026-08-14",0.03971,0.89555,{"date":193,"score":190,"percentile":194},"2026-08-15",0.89581,{"date":196,"score":190,"percentile":197},"2026-08-16",0.89583,{"date":199,"score":190,"percentile":200},"2026-08-17",0.89584,{"date":82,"score":190,"percentile":202},0.89591,{"date":90,"score":49,"percentile":91},[205,210],{"source":53,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":206,"cvss_v4_0":9},{"baseScore":51,"baseSeverity":207,"vectorString":54,"impactScore":208,"exploitabilityScore":209},"CRITICAL",8.7,10,{"source":59,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":211,"cvss_v4_0":9},{"baseScore":51,"baseSeverity":207,"vectorString":212,"impactScore":208,"exploitabilityScore":209},"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",[214,226,233,240],{"ecosystem":9,"name":215,"vendor":216,"product":217,"cpe_part":218,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":219},"Microsoft SharePoint Enterprise Server 2016","microsoft","microsoft sharepoint enterprise server 2016","a",[220],{"version":221,"is_range":46,"range_type":53,"version_start":222,"version_start_type":223,"version_end":224,"version_end_type":225,"fixed_in":9},">= 16.0.0, \u003C 16.0.5561.1001","16.0.0","including","16.0.5561.1001","excluding",{"ecosystem":9,"name":227,"vendor":216,"product":228,"cpe_part":218,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":229},"Microsoft SharePoint Server 2019","microsoft sharepoint server 2019",[230],{"version":231,"is_range":46,"range_type":53,"version_start":222,"version_start_type":223,"version_end":232,"version_end_type":225,"fixed_in":9},">= 16.0.0, \u003C 16.0.10417.20175","16.0.10417.20175",{"ecosystem":9,"name":234,"vendor":216,"product":235,"cpe_part":218,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":236},"Microsoft SharePoint Server Subscription Edition","microsoft sharepoint server subscription edition",[237],{"version":238,"is_range":46,"range_type":53,"version_start":222,"version_start_type":223,"version_end":239,"version_end_type":225,"fixed_in":9},">= 16.0.0, \u003C 16.0.19725.20434","16.0.19725.20434",{"ecosystem":9,"name":241,"vendor":216,"product":242,"cpe_part":218,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":243},"SharePoint Server","sharepoint_server",[244,247,249],{"version":245,"is_range":46,"range_type":246,"version_start":9,"version_start_type":9,"version_end":239,"version_end_type":225,"fixed_in":9},"lt16.0.19725.20434","cpe",{"version":248,"is_range":27,"range_type":246,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2016",{"version":250,"is_range":27,"range_type":246,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2019"]