CVE-2026-20947

Publication date

2026-01-13 17:56:52

Family

microsoft

State

PUBLISHED

Description

Improper neutralization of special elements used in an sql command (sql injection) in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.