This vulnerability (CVE-2026-32201) in Microsoft SharePoint Enterprise Server 2016 arises from improper input validation (CWE-20). It enables an unauthenticated attacker to conduct spoofing attacks remotely, potentially misleading users or systems by falsifying data or identity information. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality and integrity. Microsoft has released an official fix for this issue as documented in their security update guide.

An attacker exploiting this vulnerability can perform spoofing over the network, which may lead to unauthorized information disclosure or manipulation of data integrity. There is no impact on availability reported. The vulnerability affects confidentiality and integrity but does not require user interaction or privileges to exploit.

Microsoft has provided an official fix for this vulnerability. Users and administrators of Microsoft SharePoint Enterprise Server 2016 should apply the security update available from the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201 to remediate this issue. No additional mitigations are indicated by the vendor advisory.