CVE Watch—

CVE-2026-32201

Microsoft SharePoint Server Improper Input Validation Vulnerability

CVSS

—

Sin CVSS

EPSS

22.8%

p97

KEV

SÍ

14 abr 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

22.8%EPSS · 30 días24.2%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Microsoft / SharePoint Server

Vulnerabilidad

Microsoft SharePoint Server Improper Input Validation Vulnerability

Añadido a KEV

14 abr 2026

Remediar antes de

28 abr 2026

Uso conocido en ransomware

Descripción resumida

Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201 ; https://nvd.nist.gov/vuln/detail/CVE-2026-32201

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2023-29357—

99.9%

KEV—80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2023-24955—

99.7%

KEV—80Microsoft SharePoint Server Code Injection Vulnerability—CVE-2026-561645.3 MED

92.0%

KEV—78Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability2d CVE-2026-456598.8 ALT

86.8%

KEV—76Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability14d