CVE Watch—

CVE-2026-32201

Microsoft SharePoint Server Improper Input Validation Vulnerability

CVSS

—

No CVSS

EPSS

22.8%

p97

KEV

YES

Apr 14, 2026

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

22.8%EPSS · 30 days24.2%

2026-06-302026-07-16

KEV catalog record

Product

Microsoft / SharePoint Server

Vulnerability

Microsoft SharePoint Server Improper Input Validation Vulnerability

Added to KEV

Apr 14, 2026

Remediate by

Apr 28, 2026

Known ransomware use

Summary description

Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201 ; https://nvd.nist.gov/vuln/detail/CVE-2026-32201

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-29357—

99.9%

KEV—80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2023-24955—

99.7%

KEV—80Microsoft SharePoint Server Code Injection Vulnerability—CVE-2026-561645.3 MED

92.0%

KEV—78Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability2d CVE-2026-456598.8 HIG

86.8%

KEV—76Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability14d