CVE Watch—

CVE-2026-32201

Microsoft SharePoint Server Improper Input Validation Vulnerability

CVSS

—

No CVSS

EPSS

43.4%

p99

KEV

YES

Apr 14, 2026

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

1.0%EPSS · 30 days43.4%

2026-09-162026-10-14

KEV catalog record

Product

Microsoft / SharePoint Server

Vulnerability

Microsoft SharePoint Server Improper Input Validation Vulnerability

Added to KEV

Apr 14, 2026

Remediate by

Apr 28, 2026

Known ransomware use

Summary description

Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201 ; https://nvd.nist.gov/vuln/detail/CVE-2026-32201

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-561645.3 MED

62.4%

KEV—69Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability93d CVE-2026-456598.8 HIG

85.7%

KEV—76Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability84d CVE-2023-29357—

100.0%

KEV—80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2023-24955—

99.7%

KEV—80Microsoft SharePoint Server Code Injection Vulnerability—