This vulnerability in Microsoft SharePoint Enterprise Server 2016 (version 16.0.0) is due to improper authorization controls, enabling an attacker with some level of authorization to execute code remotely over a network. The CVSS 3.1 base score is 8.0, reflecting high impact on confidentiality, integrity, and availability. The vulnerability is tracked as CWE-285 (Improper Authorization). Microsoft has published an official fix to remediate this issue, as detailed in their security update guide.

An attacker with authorized access can execute arbitrary code remotely, potentially leading to full compromise of the affected SharePoint server. The impact affects confidentiality, integrity, and availability of the system. No known exploits are reported in the wild at this time.

Apply the official security update provided by Microsoft as soon as possible. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47298 for detailed patching instructions. Since an official fix is available, remediation should be prioritized to prevent potential exploitation.