Weakness (CWE)

CWE-1390: Weak Authentication

Class Incomplete

The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

Source: MITRE CWE-1390

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.1

CVE-2026-55040 Exploited Public exploit EPSS 70%

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Jul 14, 2026
KEV Aug 18, 2026

CWE-1390: Weak Authentication

Microsoft SharePoint Server Security Feature Bypass Vulnerability