PT-2026-32853 · Microsoft · Sharepoint Server

Published 2026-04-14 · Updated 2026-07-04 · CVE-2026-32201

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Server Subscription Edition (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified)

Description Improper input validation in Microsoft Office SharePoint allows an unauthenticated remote attacker to perform spoofing over a network. This issue enables attackers to gain unauthorized access to sensitive information, view protected data, and tamper with or modify disclosed information without requiring a password or user interaction. Such manipulation can be used to facilitate phishing, data manipulation, and social engineering at scale. Real-world exploitation has been observed, with over 1,300 servers remaining unpatched and exposed to these attacks.

Recommendations Apply the security updates released on April 14 for Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server.

Fix

DoS

RCE

LPE

SSRF

Weakness Enumeration

CWE-20

CWE-918

Related Identifiers

BDU:2026-05272

CVE-2026-32201

Affected Products

Sharepoint Server

References · 139

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32201 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32201 · Security Note
• https://bdu.fstec.ru/vul/2026-05272 · Security Note
• https://twitter.com/Shadowserver/status/2046656123629908095 · Twitter Post
• https://twitter.com/vuln_tracker/status/2044682747780931820 · Twitter Post
• https://twitter.com/0dayPublishing/status/2044112131176480858 · Twitter Post
• https://twitter.com/eSecurityPlanet/status/2047060410277216686 · Twitter Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note
• https://twitter.com/aviatrixtrc/status/2044206014849761369 · Twitter Post
• https://t.me/avleonovcom/1648 · Telegram Post
• https://twitter.com/joepettit2/status/2044401715684782421 · Twitter Post
• https://twitter.com/TweetThreatNews/status/2044170104154226759 · Twitter Post
• https://twitter.com/pwrdbyrog/status/2045903178428735901 · Twitter Post