CVE-2026-32201—Microsoft SharePoint Server Improper Input Validation Vulnerability

Vulnerability Name

Microsoft SharePoint Server Improper Input Validation Vulnerability

Description

Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201
• https://nvd.nist.gov/vuln/detail/CVE-2026-32201

Related News Articles

• Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server VersionsMay 26, 2026
• Over 1,300 Microsoft SharePoint servers vulnerable to spoofing attacksApril 22, 2026
• April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and MoreApril 15, 2026
• Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New VulnerabilitiesApril 15, 2026
• Microsoft April 2026 Patch Tuesday fixes 167 flaws, 2 zero-daysApril 14, 2026

Related Weaknesses

• CWE-20