SharePoint Flaw Initially Listed as Spoofing Enables Authenticated RCE

A Microsoft SharePoint Server vulnerability initially classified as a lower-severity spoofing flaw actually allows authenticated remote code execution. Researchers have released technical details affecting SharePoint 2016, 2019, and Subscription Edition. Administrators are strongly advised to apply the available patches immediately to prevent potential system compromise.