CVE-2026-32201NVD

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Severity Level

MEDIUM(6.5)

Published Date

Apr 14, 2026

Last Modified

May 28, 2026

Exploitation Status

ACTIVE

EPSS Score (30-Day)

24.17%Probability

Root Weakness (CWE)

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required.

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

ConfidentialityLow

IntegrityLow

AvailabilityNone

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

⚙️Custom EPSS — Filter noise, focus on risk.

💬Webhooks — Slack & Teams integration.