CVE-2026-32201

CVE-2026-32201 is an improper input validation vulnerability in Microsoft Office SharePoint that enables unauthorized attackers to perform spoofing attacks over a network without requiring authentication or user interaction. The vulnerability has a CVSS score of 6.5 (Medium) with a network-based attack vector and low complexity, resulting in limited confidentiality and integrity impacts. This vulnerability is actively being exploited in the wild, as indicated by its inclusion in the Known Exploited Vulnerabilities catalog, and carries a FAUCET Risk Score of 83.0 out of 100, indicating elevated concern despite its moderate baseline severity rating. The EPSS score of 0.0794 suggests this threat ranks higher than approximately 92% of all documented CVEs in terms of exploitation probability. Organizations running affected SharePoint instances should prioritize patching to mitigate the active exploitation risk.