Microsoft Upgrades SharePoint Flaw From Spoofing to 8.8 RCE

A SharePoint Server vulnerability tracked as CVE-2026-65660 turned out to be far more serious than Microsoft first indicated. The company originally described it as a spoofing issue with a CVSS score of 6.5. In reality, it is an authenticated RCE flaw rated 8.8. That gap matters, because security teams that trusted the first label may have pushed the patch further down their to-do lists.