CVE Watch—

CVE-2026-32201

Microsoft SharePoint Server Improper Input Validation Vulnerability

CVSS

—

No CVSS

EPSS

42.8%

p99

KEV

YES

Apr 14, 2026

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

21.5%EPSS · 30 days42.8%

2026-08-022026-08-30

KEV catalog record

Product

Microsoft / SharePoint Server

Vulnerability

Microsoft SharePoint Server Improper Input Validation Vulnerability

Added to KEV

Apr 14, 2026

Remediate by

Apr 28, 2026

Known ransomware use

Summary description

Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201 ; https://nvd.nist.gov/vuln/detail/CVE-2026-32201

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-561645.3 MED

97.9%

KEV—79Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability47d CVE-2026-456598.8 HIG

99.5%

KEV—80Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability39d CVE-2023-29357—

100.0%

KEV—80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2023-24955—

99.7%

KEV—80Microsoft SharePoint Server Code Injection Vulnerability—