CISA KEV: CVE-2026-56164 — Microsoft SharePoint Server actively exploited

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability. Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in No