#cve202632201 — Public Fediverse posts

CISA Warns of Actively Exploited SharePoint Vulnerabilities

The US Cybersecurity and Infrastructure Security Agency (CISA) has warned of three SharePoint vulnerabilities, including CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, that are being actively exploited by attackers. These flaws, affecting on-premises SharePoint Server installations, pose a significant threat, with one remote code…

https://osintsights.com/cisa-warns-of-actively-exploited-sharepoint-vulnerabilities?utm_source=mastodon&utm_medium=social

#SharepointVulnerabilities #Cve202632201 #Cve202645659 #Cve202656164 #Cisa

CISA Warns of Actively Exploited SharePoint Flaws

Don't let your SharePoint servers become an easy target: over 800 Internet-exposed servers remain unpatched against actively exploited vulnerabilities, including CVE-2026-32201 and CVE-2026-45659. Act now to protect your systems from potential attacks.

https://osintsights.com/cisa-warns-of-actively-exploited-sharepoint-flaws?utm_source=mastodon&utm_medium=social

#MicrosoftSharepoint #Cisa #Cve202632201 #Cve202645659 #Cve202656164

Unpatched SharePoint Servers Exposed to Ongoing Spoofing Attacks

Over 1,300 Microsoft SharePoint servers are still vulnerable to a spoofing attack, despite a security update being available since last week, leaving them exposed to ongoing exploitation by hackers. This comes after Microsoft warned that the CVE-2026-32201 vulnerability was exploited as a zero-day, and attackers are…

https://osintsights.com/unpatched-sharepoint-servers-exposed-to-ongoing-spoofing-attacks?utm_source=mastodon&utm_medium=social

#Cve202632201 #MicrosoftSharepoint #SpoofingAttacks #ZeroDay #UnpatchedServers

🚨 [CISA-2026:0414] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0414)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2009-0238 (https://secdb.nttzen.cloud/cve/detail/CVE-2009-0238)
- Name: Microsoft Office Remote Code Execution
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Office
- Notes: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009 ; https://nvd.nist.gov/vuln/detail/CVE-2009-0238

⚠️ CVE-2026-32201 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-32201)
- Name: Microsoft SharePoint Server Improper Input Validation Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: SharePoint Server
- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201 ; https://nvd.nist.gov/vuln/detail/CVE-2026-32201

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260414 #cisa20260414 #cve_2009_0238 #cve_2026_32201 #cve20090238 #cve202632201