PT-2026-40134 · Microsoft · Teams

Published 2026-05-12 · Updated 2026-05-15 · CVE-2026-32185

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Teams (affected versions not specified)

Description Files or directories accessible to external parties allow an unauthorized attacker to perform spoofing locally. This issue represents a failure in the trust boundary where identity can be manipulated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

BDU:2026-06815

CVE-2026-32185

Affected Products

Teams

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-32185 · Security Note
• https://bdu.fstec.ru/vul/2026-06815 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32185 · Vendor Advisory
• https://twitter.com/retardedusa/status/2054718059282112697 · Twitter Post
• https://twitter.com/cybrsecpath/status/2055258350619922467 · Twitter Post
• https://twitter.com/windowsforum/status/2054299886925787524 · Twitter Post
• https://feedly.com/cve/CVE-2026-32185 · Note
• https://twitter.com/SelvaKtm2/status/2055268430698406186 · Twitter Post
• https://twitter.com/CyberDhaal/status/2054445680639590890 · Twitter Post
• https://twitter.com/unknownmatter19/status/2054617473845272832 · Twitter Post
• https://twitter.com/trerbbb/status/2054396281900925372 · Twitter Post