sign in--:--:--UTC

CVE-2026-32201

exploited in the wild☆ pin

CVSS

6.5

Reports

10

First seen

Apr 15, 2026

Last seen

Jul 21, 2026

Affected product

Microsoft SharePoint Server

Associated actors

313 Team ×1 APT28 ×1 Bitter ×1 Contagious Interview ×1 Glitter Carp ×1 idbzoomh ×1 Infrastructure Destruction Squad ×1 Scattered Lapsus$ Hunters ×1 Sequin Carp ×1 ShinyHunters ×1 Silk Typhoon ×1 Storm-2372 ×1 UAT-10608 ×1 UAT-4356 ×1

Recent reports

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

The Hacker NewsJul 21, 2026 Critical

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV Catalog

The Hacker NewsJul 17, 2026 High

Researcher Releases Windows Zero-Day PoC After Microsoft Patch Tuesday; SharePoint Flaws Actively Exploited

The Hacker NewsJul 15, 2026 Critical

CISA warns admins to patch actively exploited SharePoint flaws

Bleeping ComputerJul 15, 2026 High

CISA Urges SharePoint Hardening After New Exploitations

CISA AdvisoriesJul 14, 2026 High

Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions

The Hacker NewsMay 26, 2026 High

CERT-EU Cyber Brief April 2026 – Espionage, Supply-Chain Attacks, and Critical Infrastructure Threats

CERT-EU Threat IntelMay 4, 2026 High

Microsoft April 2026 Patch Tuesday: 163 CVEs including 8 critical, 1 in-the-wild exploit

Sophos NewsApr 17, 2026 High

High Threat Security Alert: Multiple Vulnerabilities in Microsoft Products (April 2026)

GovCERT.HKApr 15, 2026 High

Microsoft April 2026 Security Updates: CVE-2026-32201 Exploited in Wild

JPCERT/CC AlertsApr 15, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans