CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

Security Alert: Microsoft Releases April 2026 Security Updates

unknownknown exploitedCVE-2026-32201
Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.
JPCERT-AT-2026-0010 JPCERT/CC 2026-04-15 I. Overview Microsoft has released April 2026 Security Updates to address the vulnerabilities in their products. Attackers leveraging these vulnerabilities may be able to perform spoofing over a network, or execute arbitrary code remotely without authentication, etc. Microsoft Corporation April 2026 Security Updates https://msrc.microsoft.com/update-guide/en-us/releaseNote/2026-Apr According to Microsoft, among the vulnerabilities, the following vulnerability has been confirmed to be exploited in the wild. Please consider applying the security update programs by referring to the information provided by Microsoft. CVE-2026-32201 Microsoft SharePoint Server Spoofing Vulnerability https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201 II. Solution Please apply the security update programs through Microsoft Update, Windows Update, etc. Microsoft Update Catalog https://www.catalog.update.microsoft.com/ Windows Update: FAQ https://support.microsoft.com/en-us/help/12373/windows-update-faq III. References Microsoft Corporation Release Notes https://msrc.microsoft.com/update-guide/ If you have any information regarding this alert, please contact JPCERT/CC. JPCERT Coordination Center (Cyber Security Coordination Group) MAIL: ew-info@jpcert.or.jp https://www.jpcert.or.jp/english/

CSIRTS triage

What
A spoofing vulnerability allows attackers to execute arbitrary code remotely without authentication.
Who is affected
Users of Microsoft SharePoint Server are affected.
Urgency
Remediation is urgent as the vulnerability has been exploited in the wild.
Action
Apply the security update programs through Microsoft Update.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch SharePoint Server

Get an email when a new SharePoint Server advisory drops — max one per day, one-click unsubscribe.

Details

Source
JPCERT/CC Security Alerts (JP · national-cert · site)
Severity
unknown
Published
2026-04-15
Exploitation
Observed in the wild (CISA KEV)

Original advisory: https://www.jpcert.or.jp/english/at/2026/at260010.html

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-32201coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

More from JPCERT/CC Security Alerts