CVE-2026-32201

MediumCVSS 6.5/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Apr 14, 2026
Last modified
Jun 17, 2026
Added to CISA KEV
Apr 14, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-322024.3Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.CVE-2026-322037.5Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.CVE-2026-322047.8External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.CVE-2026-322076.1Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attackCVE-2026-322085.4Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to CVE-2026-322094.4Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.CVE-2026-32214.9Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker wCVE-2026-322107.5Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network.CVE-2026-322117.5Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.CVE-2026-322125.5Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to discloCVE-2026-322139.8Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.CVE-2026-322145.5Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
CVE-2026-32201: Medium severity, CVSS 6.5 | Vulnix