CVE-2026-32201: medium-severity vulnerability in Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server Spoofing Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Microsoft SharePoint Server doesn't properly validate user input, allowing attackers to impersonate legitimate users or content over a network. This could trick users into trusting malicious messages or actions that appear to come from trusted sources.
CWE-20 improper input validation flaw in SharePoint Server enables network-based spoofing attacks where an attacker can forge or manipulate input data to misrepresent identity or origin. Exploitation requires network access to the SharePoint instance; the vulnerability allows threat actors to bypass authentication/authorization checks tied to input validation.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.