CVE Watch—

CVE-2026-32201

Microsoft SharePoint Server Improper Input Validation Vulnerability

CVSS

—

Sin CVSS

EPSS

42.8%

p99

KEV

SÍ

14 abr 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

21.5%EPSS · 30 días42.8%

2026-08-022026-08-30

Ficha del catálogo KEV

Producto

Microsoft / SharePoint Server

Vulnerabilidad

Microsoft SharePoint Server Improper Input Validation Vulnerability

Añadido a KEV

14 abr 2026

Remediar antes de

28 abr 2026

Uso conocido en ransomware

Descripción resumida

Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201 ; https://nvd.nist.gov/vuln/detail/CVE-2026-32201

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-561645.3 MED

97.9%

KEV—79Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability47d CVE-2026-456598.8 ALT

99.5%

KEV—80Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability39d CVE-2023-29357—

100.0%

KEV—80Microsoft SharePoint Server Privilege Escalation Vulnerability—CVE-2023-24955—

99.7%

KEV—80Microsoft SharePoint Server Code Injection Vulnerability—