Microsoft Warns of Actively Exploited SharePoint Server Zero-Day - gbhackers.com

CVE/vulnerabilityCyber Security NewsMicrosoft 1 min.Read Microsoft Warns of Actively Exploited SharePoint Server Zero-Day By Divya April 15, 2026 Share Facebook Twitter Pinterest WhatsApp Microsoft issued an urgent security update addressing an actively exploited zero-day vulnerability in its SharePoint Server platform. The flaw, officially tracked as CVE-2026-32201, allows unauthenticated attackers to conduct network-based spoofing attacks. Because threat actors are already exploiting this weakness in the wild, system administrators must apply the available patches immediately to protect their corporate networks. Technical Vulnerability Details According to the Microsoft Security Response Center disclosure, CVE-2026-32201 carries an “Important” severity rating and a CVSS 3.1 base score of 6.5 out of 10. The root cause of the vulnerability stems from improper input validation (CWE-20) within the Microsoft Office SharePoint architecture. Key technical characteristics of the exploit include: Attack Vector: The flaw is exploitable remotely over a network connection. Complexity: The attack complexity is low, making it relatively easy for threat actors to execute. Authentication: No special privileges or user interaction are required to launch a successful attack. Exploit Status: Microsoft has confirmed that functional exploit code exists and active exploitation has already been detected. While a CVSS score of 6.5 might seem moderate compared to critical remote code execution flaws, the active exploitation of this zero-day makes it a high-priority threat. If an attacker successfully leverages this spoofing vulnerability, they can compromise the targeted server in two primary ways. First, attackers can view sensitive data, resulting in a low-level loss of system confidentiality. Second, they can make unauthorized changes to disclosed information, causing a low-level impact on data integrity. However, Microsoft’s advisory notes that attackers cannot limit access to the system resources, meaning server availability remains completely unaffected. Microsoft has released official security updates to resolve the improper input validation issue. To protect their environments, organizations must download and install the appropriate Knowledge Base (KB) updates for their specific deployments. The vulnerability impacts the following software versions: Microsoft SharePoint Server Subscription Edition (Update KB5002853) Microsoft SharePoint Server 2019 (Update KB5002854) Microsoft SharePoint Enterprise Server 2016 (Update KB5002861) Administrators running any of these supported versions should prioritize deploying these patches. Due to the confirmed in-the-wild exploitation, delaying these security updates leaves enterprise networks highly vulnerable to ongoing spoofing attacks and potential data exposure. Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google. Tags cyber security Cyber Security News Vulnerability Divya Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world. Hot this week Infosec- Resources How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities June 4, 2023 1 What is Deep Web The deep web, invisible web, or... SOC Architecture How to Build and Run a Security Operations Center (SOC Guide) – 2023 June 3, 2023 12 Today’s Cyber security operations center (CSOC) should have everything... Cyber Security News Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component October 18, 2023 0 TeamViewer's popularity and remote access capabilities make it an... Checklist Web Server Penetration Testing Checklist – 2026 January 6, 2026 0 Web server pentesting is performed under three significant categories: identity,... Infosec- Resources ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities June 4, 2023 4 ATM Penetration testing, Hackers have found different approaches to... Topics AcquisitionAdobeAdwareAIAmazonAmazon AWSAMDAndroidAnti VirusAntimalwareANY RUNApacheAPIAppleAPTArtificial IntelligenceAvastAWSAzureBackdoorBitcoinBluetoothBotnetBrowserBuffer over flowBug BountyBusinessChatbotsChatGPTChecklistChromeCiscoCISOCISO AdvisoryCloudCloud SecurityCloudflareComputer SecurityCourseCPUCross site ScriptingcryptocurrencyCryptocurrency hackCVE/vulnerabilityCyber AdvisoryCyber AICyber AttackCyber Crimecyber securityCyber security CourseCyber Security NewsCyber Security ResourcesDark WebData BreachData GovernanceDDOSDealsDeepSeekDiscordDNSDos AttackDriveDropboxEducationEmailEmail SecurityEthical HackingExploitExploitation ToolsExtratorrentsFACEBOOKFeaturedFirefoxFirefox NewsFirewallForensics ToolsgameGenAIGitHubGitLabGmailGoogleGoogle dorksGovernanceGRCHacking BooksHacksHardware HackingHBOHTMLHTTPIBMIISIncident ResponseInformation GatheringInformation Security RisksInfosec- ResourcesInsider ThreatsInstagramIntelMore cyber security Hackers Exploit Entra ID Accounts to Steal Microsoft 365, Azure Data 0 Hackers Abuse Microsoft Entra ID Accounts to Exfiltrate Microsoft... cyber security JavaScript Malware Campaign Drops Crypto Clipper via PowerShell 0 A large-scale CountLoader campaign that uses layered obfuscation, multi-stage... cyber security Compromised GitHub Action Steals Workflow Credentials 0 A widely used GitHub Action, actions-cool/issues-helper, has been compromised in... cyber security Mini Shai-Hulud Attack Hits @antv npm Packages 0 A large-scale npm supply chain attack has compromised multiple... Amazon AWS CISA Admin Reportedly Exposes AWS GovCloud Credentials in Public GitHub Repository 0 A significant security lapse involving the U.S. Cybersecurity and... Cyber Security News Microsoft to Retire Teams Together Mode to Improve Performance 0 Microsoft has announced it will retire the “Together mode”... CVE/vulnerability SEPPmail Gateway Flaws Expose Organizations to RCE and Email Traffic Interception 0 Multiple critical vulnerabilities in the SEPPmail Secure E-Mail Gateway... AI Mythos Preview Automates PoC Exploit Creation for Vulnerability Research 0 A new AI model from Anthropic is changing how... Related Articles Hackers Exploit Entra ID Accounts to Steal Microsoft 365, Azure Data cyber security May 19, 2026 JavaScript Malware Campaign Drops Crypto Clipper via PowerShell cyber security May 19, 2026 Compromised GitHub Action Steals Workflow Credentials cyber security May 19, 2026 Mini Shai-Hulud Attack Hits @antv npm Packages cyber security May 19, 2026 CISA Admin Reportedly Exposes AWS GovCloud Credentials in Public GitHub Repository Amazon AWS May 19, 2026 Recent News Hackers Exploit Entra ID Accounts to Steal Microsoft 365, Azure Data Mayura Kathir - May 19, 2026 JavaScript Malware Campaign Drops Crypto Clipper via PowerShell Mayura Kathir - May 19, 2026 Compromised GitHub Action Steals Workflow Credentials Mayura Kathir - May 19, 2026 Mini Shai-Hulud Attack Hits @antv npm Packages Mayura Kathir - May 19, 2026 CISA Admin Reportedly Exposes AWS GovCloud Credentials in Public GitHub Repository Divya - May 19, 2026 Microsoft to Retire Teams Together Mode to Improve Performance Divya - May 19, 2026