Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.
Product
SharePoint Server
Added to KEV
14 Apr 2026
Federal remediation due
28 Apr 2026
Known ransomware use
Not reported
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.