Microsoft Patch Still Leaves 1,300 SharePoint Servers Exposed

TechRepublic reports that more than 1,300 internet-exposed Microsoft SharePoint servers remain unpatched for CVE-2026-32201, a spoofing vulnerability Microsoft says was exploited as a zero-day. Although Microsoft released a patch, many publicly reachable instances have not been updated, leaving organizations at risk of account spoofing, unauthorized access, and follow-on attacks. Immediate patching, inventory of internet-exposed SharePoint instances, and monitoring for indicators of compromise are recommended.