Over 1,300 Microsoft SharePoint servers face spoofing attacks from unpatched zero-day vulnerability

bleepingcomputer.com

Over 1,300 Microsoft SharePoint servers are vulnerable to spoofing attacks due to an unpatched zero-day flaw. The vulnerability, CVE-2026-32201, allows unauthenticated attackers to perform network spoofing. Microsoft released patches in April 2026, but many servers remain unprotected. CISA added the flaw to its Known Exploited Vulnerabilities catalog and mandated federal agencies to patch within two weeks.


With a significance score of 2.1, this news ranks in the top 23% of today's 33069 analyzed articles.

Get summaries of news with significance over 5.5 (usually ~10 stories per week). Read by 10,000+ subscribers: