Over 1,300 Microsoft SharePoint servers vulnerable to spoofing attacks

CVE-2026-32201 is a spoofing vulnerability affecting SharePoint servers that allows threat actors without privileges to perform network spoofing by exploiting an improper input validation weakness. The attacks are low-complexity and don't require user interaction. Successful exploitation allows attackers to view sensitive information (Confidentiality) and make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability). The vulnerability was exploited as a zero-day and is still being abused in ongoing attacks.