CVE-2026-32201

6.5 medium KEV · due 2026-04-28 exploit SSVC exploitation: active Analyzed

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Fix

Public exploits 1

B1tBit/CVE-2026-32201-exploit PoC on GitHub

Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.

CISA KEV required action · due 2026-04-28

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Added to the catalog 2026-04-14. CISA KEV

Patch, vendor advisory and mitigation references on NVD 1

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201 Vendor Advisory

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

2026-10-26 22:36First seenCVSS 6.5 · in KEV · microsoftNVD modified 2026-10-26 22:10

Affected (CPE criteria) 3

cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*

References 2

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201 Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-32201 Third Party Advisory, US Government Resource