CVE Watch—

CVE-2026-32201

Microsoft SharePoint Server Improper Input Validation Vulnerability

CVSS

—

Sin CVSS

EPSS

43.4%

p99

KEV

SÍ

14 abr 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

1.0%EPSS · 30 días43.4%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Microsoft / SharePoint Server

Vulnerabilidad

Microsoft SharePoint Server Improper Input Validation Vulnerability

Añadido a KEV

14 abr 2026

Remediar antes de

28 abr 2026

Uso conocido en ransomware

Descripción resumida

Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201 ; https://nvd.nist.gov/vuln/detail/CVE-2026-32201

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-561645.3 MED

62.4%

KEV—69Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability92d CVE-2026-456598.8 ALT

85.7%

KEV—76Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability84d CVE-2023-29357—

100.0%

KEV—80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2023-24955—

99.7%

KEV—80Microsoft SharePoint Server Code Injection Vulnerability—