Lyrie
Actively Exploited
CVSS 6.5ACTIVELY EXPLOITED4 sources verified·1 min read
By Lyrie Threat Intelligence·5/28/2026

MEDIUM: CVE-2026-32201 actively exploited — microsoft sharepoint server

CVE: CVE-2026-32201

CVSS: 6.5 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Severity: MEDIUM

Status: ✅ Confirmed exploited in the wild (CISA KEV)

Affected

  • microsoft sharepoint server

Summary

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Verified Sources

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201
  • https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-32201

_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._

Lyrie Verdict

Lyrie's autonomous detection layer catches active exploitation primitives at machine speed — closing the gap between disclosure and weaponization that traditional defense simply can't cover.

Validated sources

  1. [1]NVD
  2. [2]GitHub Advisory
  3. [3]MITRE
  4. [4]CISA KEV