CVE-2026-32201

Published Apr 14, 2026

Last updated 2 months ago

Exploit known CVSS medium 6.5

Zero-day

Server

Network

web application

Cloud

IoT

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-32201 is an improper input validation vulnerability affecting Microsoft Office SharePoint Server. This flaw allows an unauthorized attacker to perform spoofing attacks over a network. The vulnerability stems from inadequate validation of user-supplied input within SharePoint Server's network-facing components. Exploitation of CVE-2026-32201 can occur remotely without requiring authentication or user interaction, and with low attack complexity. This allows malicious actors to conduct spoofing attacks, potentially impersonating legitimate users or resources within the SharePoint environment. The vulnerability has been actively exploited in the wild as a zero-day.

Description: Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Source: secure@microsoft.com
NVD status: Analyzed
Products: sharepoint_server

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.5
Impact score: 2.5
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Severity: MEDIUM

Known exploits

Data from CISA

Vulnerability name: Microsoft SharePoint Server Improper Input Validation Vulnerability
Exploit added on: Apr 14, 2026
Exploit action due: Apr 28, 2026
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

secure@microsoft.com: CWE-20
nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*",
            "matchCriteriaId": "5CA92EAC-72F0-43F4-A8E0-FA40C57AEF01",
            "versionEndExcluding": "16.0.19725.20210",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId": "F815EF1D-7B60-47BE-9AC2-2548F99F10E4",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId": "6122D014-5BF1-4AF4-8B4D-80205ED7785E",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.