CVE-2026-32201

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 14, 2026

Last Seen

October 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Warlock Ransomware Targets Critical Infrastructure in Spanish and Portuguese Regions78.7

The Warlock ransomware group, tracked as Longlegs or Storm-2603, has targeted critical infrastructure in Portuguese- and Spanish-speaking countries, including a water utility, a telecommunications provider, a regional government body, and an university. Recent attacks exploited vulnerabilities in Mi...

CISA Warns of Exploitation of 17-Year-Old Excel Vulnerability72.8

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of CVE-2009-0238, a critical remote code execution vulnerability in Microsoft Excel, first identified in 2009. This vulnerability allows attackers to execute malicious code by convincing...

Microsoft Edge and SharePoint Server Vulnerabilities Under Active Exploitation72.8

On April's Patchday, Microsoft addressed over 160 security vulnerabilities, including critical issues in Edge and SharePoint Server. Attackers are actively exploiting CVE-2026-32201 in SharePoint for spoofing attacks, allowing unauthorized access to isolated data. Additionally, CVE-2026-5281 in Edge...

New Windows Zero-Day Vulnerabilities: YellowKey and GreenPlasma Exploits Released69.9

Security researcher Nightmare-Eclipse has disclosed two critical zero-day vulnerabilities affecting Windows 11 and Windows Server 2022/2025. The first, YellowKey, allows attackers to bypass BitLocker encryption, granting unrestricted access to protected drives by exploiting the Windows Recovery Envi...