Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by an Insecure Deserialization vulnerability.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft SharePoint 2019 Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Remote Code Execution     (CVE-2026-33112, CVE-2026-33110, CVE-2026-35439,     CVE-2026-40357, CVE-2026-40365, CVE-2026-40367, CVE-2026-40368,     CVE-2026-45659)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft SharePoint 2016 Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Remote Code Execution     (CVE-2026-33112, CVE-2026-33110, CVE-2026-35439,     CVE-2026-40357, CVE-2026-40365, CVE-2026-40367, CVE-2026-40368,     CVE-2026-45659)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Remote Code Execution     (CVE-2026-33112, CVE-2026-33110, CVE-2026-35439,     CVE-2026-40357, CVE-2026-40368, CVE-2026-45659)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
115290	Microsoft SharePoint Server 2016 < 16.0.5552.1002 Insecure Deserialization	Web App Scanning	Component Vulnerability	high
115289	Microsoft SharePoint Server 2019 < 16.0.10417.20128 Insecure Deserialization	Web App Scanning	Component Vulnerability	high
314345	Security Updates for Microsoft SharePoint Server 2019 (May 2026)	Nessus	Windows : Microsoft Bulletins	high
314344	Security Updates for Microsoft SharePoint Server 2016 (May 2026)	Nessus	Windows : Microsoft Bulletins	high
314338	Security Updates for Microsoft SharePoint Server Subscription Edition (May 2026)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2026-33112

high

Tenable Plugins

high

high

high

high

high