> CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability
[DATE: 13/01/2026 08:00]
[LANGUAGE: EN]
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.