Microsoft SharePoint Server Zero-Day Vulnerability Actively Exploited in Attacks
ID: ddf5042e-026f-5cef-ad3f-d8325753bf63
STIX ID: report--ddf5042e-026f-5cef-ad3f-d8325753bf63
Feed Name: Cyber Press
Threat Score
Microsoft released emergency patches for CVE-2026-32201, a zero-day in SharePoint Server that allows unauthenticated remote spoofing due to improper input validation; Microsoft reports active exploitation with available functional exploit code, assigns CVSS 3.1 6.5, and urges immediate deployment of KB5002853 / KB5002854 / KB5002861 to mitigate potential data exposure and integrity impacts.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.