Microsoft SharePoint Server weak authentication in the JWT token validation pipeline allows a remote unauthenticated attacker to bypass a security feature and impersonate a chosen site user/admin when the target identity is known. Impact includes unauthorized access and content changes. Mitigate by patching SharePoint to the Jul 14, 2026 MSRC update.