Microsoft SharePoint Server Improper Input Validation Vulnerability

MEDIUM 6.5EXPLOITED (CISA KEV)CVE-2026-32201 · Published 14/04/2026 · updated 26/10/2026

Microsoft SharePoint Server Improper Input Validation Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 14/04/2026. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
sharepoint server microsoft	`= 2016= 2019< 16.0.19725.20210`	`16.0.19725.20210`

Description

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201 · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · Third Party Advisory
CISA KEV · CVE-2026-32201

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free