{"schema":"vulnpedia.poc/1","cve":"CVE-2026-55040","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-08-18","ransomware":false},"epss":{"score":0.69536,"percentile":0.99359},"cvss":{"version":"3.1","score":9.1,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/b405147a204d","executable":false,"sourceId":"b405147a204d","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b405147a204d","modified":"2026-08-12T00:00:00Z","url":"https://vulncheck.com/xdb/b405147a204d"}],"repositoryUrl":"https://github.com/l0ggg/CVE-2026-55040"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/bf49aa61da7a","executable":false,"sourceId":"bf49aa61da7a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"bf49aa61da7a","modified":"2026-08-12T00:00:00Z","url":"https://vulncheck.com/xdb/bf49aa61da7a"}],"repositoryUrl":"https://github.com/sfewer-r7/CVE-2026-55040"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/916a08abd64d","executable":false,"sourceId":"916a08abd64d","verification":"catalogued","source":"vulncheck-kev","modified":"2026-08-12T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"916a08abd64d","modified":"2026-08-12T00:00:00Z","url":"https://vulncheck.com/xdb/916a08abd64d"}],"repositoryUrl":"https://github.com/zenzue/CVE-2026-55040"}],"poc_candidates":[{"url":"https://github.com/l0ggg/CVE-2026-55040","source":"poc-in-github","sourceId":"CVE-2026-55040","description":"Exploit code for CVE-2026-55040, it can create auth header for any validate account.","modified":"2026-08-20T14:49:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-55040","url":"https://github.com/l0ggg/CVE-2026-55040"},{"source":"poc-in-github","sourceId":"CVE-2026-55040","modified":"2026-08-20T14:49:00Z","url":"https://github.com/l0ggg/CVE-2026-55040"}],"tags":[]},{"url":"https://github.com/sfewer-r7/CVE-2026-55040","source":"poc-in-github","sourceId":"CVE-2026-55040","description":"Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)","modified":"2026-10-13T19:11:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-55040","url":"https://github.com/sfewer-r7/CVE-2026-55040"},{"source":"poc-in-github","sourceId":"CVE-2026-55040","modified":"2026-10-13T19:11:12Z","url":"https://github.com/sfewer-r7/CVE-2026-55040"}],"tags":[]},{"url":"https://github.com/zenzue/CVE-2026-55040","source":"poc-in-github","sourceId":"CVE-2026-55040","modified":"2026-08-26T08:15:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-55040","url":"https://github.com/zenzue/CVE-2026-55040"},{"source":"poc-in-github","sourceId":"CVE-2026-55040","modified":"2026-08-26T08:15:13Z","url":"https://github.com/zenzue/CVE-2026-55040"}],"tags":[]},{"url":"https://github.com/maxprog-svg/CVE-2026-55040-Mass-Exploit","source":"poc-in-github","sourceId":"CVE-2026-55040","description":"CVE-2026-55040","modified":"2026-08-27T10:02:45Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-55040","url":"https://github.com/maxprog-svg/CVE-2026-55040-Mass-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-55040","modified":"2026-08-27T10:02:45Z","url":"https://github.com/maxprog-svg/CVE-2026-55040-Mass-Exploit"}],"tags":[]},{"url":"https://github.com/virologi-info/mssharepoint-scanner","source":"poc-in-github","sourceId":"CVE-2026-55040","description":"A scanner for CVE-2026-55040 and CVE-2026-63520, designed to determine whether the server is affected by these two CVEs.","modified":"2026-08-27T13:41:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-55040","url":"https://github.com/virologi-info/mssharepoint-scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-55040","modified":"2026-08-27T13:41:12Z","url":"https://github.com/virologi-info/mssharepoint-scanner"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-55040 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-55040/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-55040.yaml","template":"javascript/cves/2026/CVE-2026-55040.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-55040%22&type=repositories","executable":false}]}