What’s Vulnerable › Vulnerabilities

CVE-2026-32201: Microsoft SharePoint Server Spoofing Vulnerability

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2026-04-14
• EPSS: 43.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-14 · updated 2026-10-26
• Weakness: CWE-20

Description

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Summary

CVE-2026-32201 is an improper input validation flaw in Microsoft SharePoint Server that lets an unauthenticated attacker perform spoofing over the network; rated CVSS 6.5 (medium). It is listed in CISA's Known Exploited Vulnerabilities catalog with active exploitation, and EPSS estimates a 43.4% chance of exploitation in the next 30 days. SharePoint Server is affected and is fixed in version 16.0.19725.20210. Apply the vendor update or mitigations per CISA BOD 22-01 guidance, and discontinue use if mitigations are unavailable.

CVE-2026-32201 ثغرة في التحقق من صحة المدخلات في Microsoft SharePoint Server تتيح لمهاجم غير مصرح له تنفيذ انتحال (spoofing) عبر الشبكة، بتقييم CVSS 6.5 (متوسط). الثغرة مدرجة في كتالوج CISA للثغرات المعروفة الاستغلال مع استغلال نشط، ويقدّر EPSS احتمال الاستغلال خلال 30 يوماً بنسبة 43.4%. المنتج المتأثر هو SharePoint Server وتُصلح الثغرة في الإصدار 16.0.19725.20210. طبّق تحديث المورّد أو التخفيفات وفق إرشادات CISA BOD 22-01، وتوقف عن استخدام المنتج إذا لم تتوفر التخفيفات.

Affected products

• Microsoft SharePoint Server: before 16.0.19725.20210; 2016, 2019 — fixed in 16.0.19725.20210
• Microsoft SharePoint Server Subscription Edition: from 16.0.0 before 16.0.19725.20210 — fixed in 16.0.19725.20210
• Microsoft Sharepoint Enterprise Server 2016: from 16.0.0 before 16.0.5548.1003 — fixed in 16.0.5548.1003
• Microsoft SharePoint Server: from 16.0.0 before 16.0.10417.20114 — fixed in 16.0.10417.20114

How to fix

Upgrade to a fixed version: Microsoft SharePoint Server 16.0.19725.20210; Microsoft SharePoint Server Subscription Edition 16.0.19725.20210; Microsoft Sharepoint Enterprise Server 2016 16.0.5548.1003; Microsoft SharePoint Server 16.0.10417.20114. Check the vendor advisory for mitigations.

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-32201

Get alerted when CVE-2026-32201 or the next vulnerability affects your stack