Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File
CVE-2026-123533
Summary
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
Products covered
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server 2019
Microsoft SharePoint Server Subscription Edition
Remediation
The following mitigating factors might be helpful in your situation: Enable AMSI: Ensure the Antimalware Scan Interface (AMSI) is actively integrated and scanning SharePoint and IIS worker process memory. Enable AMSI scan feature and set the Request Body Scan mode to Full in order for POST body payloads to be detected. Configure AMSI integration with SharePoint Server - https://learn.microsoft.com Install KB5002891. Install KB5002883. Install KB5002882.
Vendor-listed fixes
16.0.5561.1001
16.0.10417.20175
16.0.19725.20434
CVEs in this advisory 1
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.