<p>A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls.

What it means for a small business

Microsoft SharePoint Enterprise Server 2016 handles email and office work, which is where invoices, logins and customer details live. Check that every computer and server running it has the update, including the one in the back office nobody touches.

How likely is an attack? The Exploit Prediction Scoring System, run by FIRST (the global association of security response teams), puts the odds of this one being exploited in the next 30 days at 3.7%, higher than 89% of CVEs. That’s above average: worth scheduling this week. Scored October 28, 2026, updated daily.

Check your own setup

• Website check: reads what your site runs from the outside (WordPress version, plugins it can see, old server software) and matches it against this database.
• Server check: what your web server says about itself, and whether that version has known flaws.

More in Microsoft Microsoft SharePoint Enterprise Server 2016

• CVE-2026-97783 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform sHigh 8.1
• CVE-2026-70324 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.High 8.8
• CVE-2026-70306 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform sCritical 9.3
• CVE-2026-66808 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.High 8.8
• CVE-2026-65663 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.High 8.8
• CVE-2026-65658 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.High 8.8

Sources

• National Vulnerability Database: CVE-2020-1460
• portal.msrc.microsoft.com
• portal.msrc.microsoft.com