CVE intelligenceCISA KEV

CVE-2026-32201

Microsoft SharePoint Server Improper Input Validation Vulnerability

Published Apr 14, 2026Sources checked Sep 27, 2026

6.5MEDIUMCVSS out of 10

What this means

Actively exploited

CISA lists CVE-2026-32201 in its Known Exploited Vulnerabilities catalog, which means exploitation has been observed. The entry applies to Microsoft SharePoint Server.

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Public exploit: Not collected. Review the linked vendor advisory and apply the mitigation or fixed release for your affected product.

Microsoft Security Response Center: Exploitation reported by Microsoft Security Response Center (2026-04-14)

CISA KEVListedObserved exploitation

EPSS1.0%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2026-32201?

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.