Input validation error in Microsoft SharePoint Server - CVE-2026-32201

Vulnerability details

The vulnerability allows a remote attacker to perform a spoofing attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can perform spoofing attack.

Note, the vulnerability is being actively exploited in the wild.

Affected software

How to mitigate CVE-2026-32201

Links to Public Exploits and PoC-codes

• Exploit #12625 - CVE-2026-32201-exploit (A spoofing vulnerability exists in Microsoft SharePoint Server due to improper input validation. An unauthenticated attacker can send a specially crafted HTTP request to inject malicious JavaScript (reflected XSS), which executes i (April 23, 2026)

External References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201

Related Security Bulletins

• Spoofing attack in Microsoft Office SharePoint