Source: ChatGPT More than 1,300 internet-exposed Microsoft SharePoint servers remain unpatched against a spoofing flaw previously exploited as a zero-day. “Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network,” Microsoft said in its advisory . SharePoint servers still exposed The vulnerability , tracked as CVE-2026-32201, affects SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. These platforms are widely used for enterprise document management and collaboration. Because these systems host sensitive data and support daily operations, exploitation could lead to unauthorized access, data changes, and broader business impact. Despite Microsoft releasing patches during April 2026 Patch Tuesday, exposure remains high, with more than 1,300 internet-facing SharePoint systems still unpatched, according to Shadowserver.…