Microsoft Patch Still Leaves 1,300 SharePoint Servers Exposed

## Executive summary Microsoft disclosed CVE-2026-32201, an improper input validation flaw in SharePoint Server (2016, 2019, Subscription Edition) that enables network spoofing; Microsoft confirmed zero-day exploitation prior to the April 2026 patches and Shadowserver reports over 1,300 internet-facing SharePoint instances remain unpatched, increasing exposure and risk to organizations.