CVE-2026-20958: Microsoft SharePoint Information Disclosure Vulnerability

What type of information could be disclosed through this issue?

The vulnerability may allow limited exposure of data returned from outbound requests SharePoint makes on the attacker’s behalf, such as external HTTP responses or basic network metadata, but not internal network content or sensitive server information.