PT-2026-32853 · Microsoft · Sharepoint Server

CVE-2026-32201 · Published 2026-04-14 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Server Subscription Edition (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified)

Description An improper input validation issue exists in Microsoft Office SharePoint, allowing an unauthenticated remote attacker to perform spoofing over a network. This flaw enables the attacker to gain unauthorized access to protected information, view sensitive data, and tamper with disclosed information without requiring a password or user interaction. Real-world exploitation has been documented, including an incident where hackers accessed the Homeland Security Information Network and a connected SharePoint system between late May and early June 2026. Additionally, over 1,300 servers were reported as remaining unpatched despite active exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

LPE

RCE

SSRF

Weakness Enumeration

CWE-20

CWE-918

Related Identifiers

BDU:2026-05272

CVE-2026-32201

Affected Products

Sharepoint Server

References · 154

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32201 · Security Note
• https://bdu.fstec.ru/vul/2026-05272 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32201 · Security Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note
• https://t.me/true_secator/8277 · Telegram Post
• https://twitter.com/lyrie_ai/status/2058341212247978378 · Twitter Post
• https://twitter.com/zeroday0026/status/2044379523542880505 · Twitter Post
• https://twitter.com/inferlume_hq/status/2047308908189094104 · Twitter Post
• https://twitter.com/404LABSx/status/2045443695332274373 · Twitter Post
• https://twitter.com/CyberEdition/status/2044279605604036904 · Twitter Post
• https://twitter.com/EAlexStark/status/2078235310815867105 · Twitter Post
• https://twitter.com/horizon_secured/status/2044116460465783088 · Twitter Post
• https://twitter.com/cybrsecpath/status/2044329861490323543 · Twitter Post