April 14, 2026 · Applied Cybernetics Group
CVE-2026-32201 — Microsoft SharePoint Server
Microsoft SharePoint Server Improper Input Validation Vulnerability
- Added to KEV
2026-04-14- Federal due date
2026-04-28- Vendor
- Microsoft
- Product
- SharePoint Server
- EPSS
- 91.6th percentile (score 0.069, as of
2026-06-08) - NVD CVSS v3.1
- 6.5 (MEDIUM)
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2026-32201
CISA short description
Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
NVD description
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.