This vulnerability (CVE-2026-35439) affects Microsoft SharePoint Enterprise Server 2016 version 16.0.0 and is classified under CWE-502 (Deserialization of Untrusted Data). It enables an attacker with authorized access to execute code remotely by exploiting unsafe deserialization processes. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability. Microsoft has released an official fix to address this vulnerability as documented in their security update guide.

Successful exploitation allows an authorized attacker to execute arbitrary code remotely on the affected SharePoint server, potentially leading to full compromise of the system's confidentiality, integrity, and availability. This could result in unauthorized data access, modification, or service disruption.

An official patch is available from Microsoft to remediate this vulnerability. Administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35439 as soon as possible to mitigate the risk. No additional mitigation steps are indicated by the vendor advisory.