[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5q_Ov7sLD7_RptdIRscf3mVPo7uRYrLaqywKGevWPqs":3,"g5a-risk:CVE-2026-55040":155},{"success":4,"data":5,"meta":152},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":32,"epssPercentile":26,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":47,"references":48,"referencesCount":70,"weaknesses":71,"weaknessesCount":80,"isActivelyExploited":4,"cisaInfo":81,"otxData":26,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":123,"notableEvents":124},"CVE-2026-55040","What is CVE-2026-55040?","Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.","2026-07-14T18:18:15.413","2026-08-19T04:17:23.54",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":31},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"secure@microsoft.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,[],[],[],0.69536,[32,32,32,32,32,32,32],"Critical",[36,41,44],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"microsoft","sharepoint_server","*","cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*",{"vendor":37,"product":38,"version":42,"criteria":43,"vulnerable":4},"2016","cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",{"vendor":37,"product":38,"version":45,"criteria":46,"vulnerable":4},"2019","cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",3,[49,55,60,65],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2026-55040","Microsoft",[53,54],"Patch","Vendor Advisory",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fgithub.com\u002Fsfewer-r7\u002FCVE-2026-55040","GitHub",[59],"Exploit",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2026-55040","CISA",[59,64],"Third Party Advisory",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.rapid7.com\u002Fblog\u002Fpost\u002Fra-microsoft-sharepoint-jwt-token-authentication-bypass-cve-2026-55040\u002F","Rapid7",[69],"US Government Resource",4,[72],{"id":73,"name":74,"description":75,"extendedDescription":76,"status":77,"abstraction":78,"structure":79},"CWE-1390","Weak Authentication","The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.","Attackers may be able to bypass weak authentication faster and\u002For with less effort than expected.","Incomplete","Class","Simple",1,{"shortDescription":82,"requiredAction":82,"vulnerabilityName":82,"dateAdded":26},"",[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2026-55040? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-55040, a critical severity cyber security vulnerability from 2026. High exploit probability (69.5%). Weak authentication i...","CVE-2026-55040, CVE-2026-55040 vulnerability, CVE-2026-55040 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, microsoft security, sharepoint_server vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2026-55040",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":9,"dateModified":10,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-55040","Cybersecurity","CVE-2026-55040, CVE-2026-55040 vulnerability, CVE-2026-55040 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":26,"Negate":26,"Nodes":111},[112],{"Operator":113,"Negate":114,"CPEMatch":115},"OR",false,[116,119,121],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":118,"VersionEndIncluding":26},"5FA63EA8-B225-4E35-A6A3-DBDECF5AC4C8","16.0.19725.20434",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":120,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F815EF1D-7B60-47BE-9AC2-2548F99F10E4",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":122,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6122D014-5BF1-4AF4-8B4D-80205ED7785E",[],[125,132,139,145],{"id":126,"eventType":127,"eventTime":128,"details":129,"label":130,"color":131},"0d2ea594-d32f-46b5-944d-dffcd1ddf318","NEW_NVD","2026-07-16T04:02:14.978665+00:00","New CVE added to NVD","Published to NVD","blue",{"id":133,"eventType":134,"eventTime":135,"details":136,"label":137,"color":138},"389b29d6-9cf6-4d99-9138-6d180b61c7c7","NEW_CISA","2026-08-19T04:01:08.17243+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":140,"eventType":141,"eventTime":142,"details":143,"label":144,"color":138},"26eb7d9d-71d3-40e4-9e5d-097b6730ee41","HIGH_EPSS_DELTA","2026-08-28T04:04:40.792163+00:00","Daily EPSS score increased by 0.341 on 2026-07-16","EPSS Score Increased",{"id":146,"eventType":147,"eventTime":148,"details":149,"label":150,"color":151},"45c8f457-a577-46ad-a462-ef62fc4fb6f8","LOW_EPSS_DELTA","2026-09-25T04:05:23.607748+00:00","Daily EPSS score decreased by 0.331 on 2026-07-16","EPSS Score Decreased","green",{"lastModified":10,"cacheTime":153,"version":154},1792411466817,"2.0",{"score":156,"band":34,"action":157,"scoredAt":158},89,"Emergency patch","2026-10-16T07:15:02.647647+00:00"]