Back to the CVE list
CVE-2026-55040 CISA KEV · Actively exploitedSuited to automated attack · CISA

Microsoft SharePoint Server Security Feature Bypass Vulnerability

CVSS score

9.1

EPSS probability

%69.5

Risk score

12.7

Published

3 mo ago

OverviewPublic Exploits (5)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
sfewer-r7/CVE-2026-55040
GitHub

Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040) (★3)

Public PoCSource updated: 12.08.2026 03:21:58
G
l0ggg/CVE-2026-55040
GitHub

Exploit code for CVE-2026-55040, it can create auth header for any validate account. (★0)

Public PoCSource updated: 12.08.2026 14:05:26
G
maxprog-svg/CVE-2026-55040-Mass-Exploit
GitHub

CVE-2026-55040 (★0)

Public PoCSource updated: 27.08.2026 19:02:45
N
projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-55040.yaml
Nuclei

Nuclei: Microsoft SharePoint Server - JWT Authentication Bypass

Exploit reference
N
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-55040
NVD reference

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-55040

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-55040"