{"schema":"vulnpedia.research/1","cve":"CVE-2026-32202","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202","tags":["vendor-advisory","patch","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"microsoft","modified":"2026-10-15T15:52:51.458Z","origins":[{"source":"mitre","sourceId":"microsoft","modified":"2026-10-15T15:52:51.458Z","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202"},{"source":"nvd","sourceId":"CVE-2026-32202","modified":"2026-08-14T17:17:51.127","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202"},{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","modified":"2026-04-14T00:00:00Z","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-32202","tags":["government-resource","Third Party Advisory","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-04-29T03:55:31.800Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-04-29T03:55:31.800Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-32202"},{"source":"nvd","sourceId":"CVE-2026-32202","modified":"2026-08-14T17:17:51.127","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-32202"}]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2026-32202-detection-script-spoofing-vulnerability-in-windows-shell","tags":["Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-05-26T17:53:29.377Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-05-26T17:53:29.377Z","url":"https://www.vicarius.io/vsociety/posts/cve-2026-32202-detection-script-spoofing-vulnerability-in-windows-shell"},{"source":"nvd","sourceId":"CVE-2026-32202","modified":"2026-08-14T17:17:51.127","url":"https://www.vicarius.io/vsociety/posts/cve-2026-32202-detection-script-spoofing-vulnerability-in-windows-shell"}]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2026-32202-mitigation-script-spoofing-vulnerability-in-windows-shell","tags":["Mitigation","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-05-26T17:53:29.377Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-05-26T17:53:29.377Z","url":"https://www.vicarius.io/vsociety/posts/cve-2026-32202-mitigation-script-spoofing-vulnerability-in-windows-shell"},{"source":"nvd","sourceId":"CVE-2026-32202","modified":"2026-08-14T17:17:51.127","url":"https://www.vicarius.io/vsociety/posts/cve-2026-32202-mitigation-script-spoofing-vulnerability-in-windows-shell"}]},{"source":"euvd","sourceId":"EUVD-2026-22589","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-22589","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-22589","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-22589"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-32202","modified":"2026-04-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","modified":"2026-04-14T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Apr","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-32202","modified":"2026-04-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","modified":"2026-04-14T00:00:00Z","url":"https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Apr"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-32202","modified":"2026-04-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","modified":"2026-04-14T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.proofpoint.com/us/blog/threat-insight/more-cves-same-playbook-2026-vulnerability-exploitation-wild","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-32202","modified":"2026-04-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","modified":"2026-04-14T00:00:00Z","url":"https://www.proofpoint.com/us/blog/threat-insight/more-cves-same-playbook-2026-vulnerability-exploitation-wild"}]},{"url":"https://vulncheck.com/xdb/fbf2455bbf84","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"fbf2455bbf84","modified":"2026-04-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fbf2455bbf84","modified":"2026-04-14T00:00:00Z","url":"https://vulncheck.com/xdb/fbf2455bbf84"}]},{"url":"https://github.com/virus-or-not/CVE-2026-32202","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"fbf2455bbf84","modified":"2026-04-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fbf2455bbf84","modified":"2026-04-14T00:00:00Z","url":"https://github.com/virus-or-not/CVE-2026-32202"}]},{"url":"https://vulncheck.com/xdb/0bc945146b11","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"0bc945146b11","modified":"2026-04-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0bc945146b11","modified":"2026-04-14T00:00:00Z","url":"https://vulncheck.com/xdb/0bc945146b11"}]},{"url":"https://github.com/alexlanum/CVE-2026-32202","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"0bc945146b11","modified":"2026-04-14T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0bc945146b11","modified":"2026-04-14T00:00:00Z","url":"https://github.com/alexlanum/CVE-2026-32202"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/solarlynxsqueeze/CVE-2026-32202","source":"poc-in-github","sourceId":"CVE-2026-32202","modified":"2026-04-30T10:45:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-32202","url":"https://github.com/solarlynxsqueeze/CVE-2026-32202"},{"source":"poc-in-github","sourceId":"CVE-2026-32202","modified":"2026-04-30T10:45:16Z","url":"https://github.com/solarlynxsqueeze/CVE-2026-32202"}],"tags":[]},{"url":"https://github.com/virus-or-not/CVE-2026-32202","source":"poc-in-github","sourceId":"CVE-2026-32202","description":"Windows Shell Spoofing Vulnerability","modified":"2026-09-03T19:31:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-32202","url":"https://github.com/virus-or-not/CVE-2026-32202"},{"source":"poc-in-github","sourceId":"CVE-2026-32202","modified":"2026-09-03T19:31:16Z","url":"https://github.com/virus-or-not/CVE-2026-32202"}],"tags":[]},{"url":"https://github.com/f0xox/CVE-2026-32202","source":"poc-in-github","sourceId":"CVE-2026-32202","modified":"2026-06-25T02:30:32Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-32202","url":"https://github.com/f0xox/CVE-2026-32202"},{"source":"poc-in-github","sourceId":"CVE-2026-32202","modified":"2026-06-25T02:30:32Z","url":"https://github.com/f0xox/CVE-2026-32202"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"fbf2455bbf84","url":"https://vulncheck.com/xdb/fbf2455bbf84","cve":"CVE-2026-32202","dateAdded":"2026-05-04T19:43:55Z","modified":"2026-04-14T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/virus-or-not/CVE-2026-32202","observations":[{"dateAdded":"2026-05-04T19:43:55Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"fbf2455bbf84","modified":"2026-04-14T00:00:00Z","url":"https://vulncheck.com/xdb/fbf2455bbf84"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"0bc945146b11","url":"https://vulncheck.com/xdb/0bc945146b11","cve":"CVE-2026-32202","dateAdded":"2026-06-22T13:57:51Z","modified":"2026-04-14T00:00:00Z","exploitType":"client-side","repositoryUrl":"https://github.com/alexlanum/CVE-2026-32202","observations":[{"dateAdded":"2026-06-22T13:57:51Z","exploitType":"client-side"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"0bc945146b11","modified":"2026-04-14T00:00:00Z","url":"https://vulncheck.com/xdb/0bc945146b11"}]}],"vendorStatements":[],"exploitationSources":[{"source":"euvd","sourceId":"EUVD-2026-22589","catalog":"ENISA EU KEV","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-22589","dateAdded":"2026-04-28","origins":[{"source":"euvd","sourceId":"EUVD-2026-22589","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-22589"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-04-14T00:00:00Z","modified":"2026-04-14T00:00:00Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Microsoft","product":"Windows","dueDate":"2026-05-12T00:00:00Z","cisaDateAdded":"2026-04-28T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","modified":"2026-04-14T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","catalog":"VulnCheck KEV","kind":"report","url":"https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Apr","dateAdded":"2026-04-14T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","url":"https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Apr"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","catalog":"VulnCheck KEV","kind":"report","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202","dateAdded":"2026-04-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-04-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","catalog":"VulnCheck KEV","kind":"report","url":"https://www.proofpoint.com/us/blog/threat-insight/more-cves-same-playbook-2026-vulnerability-exploitation-wild","dateAdded":"2026-05-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-32202","url":"https://www.proofpoint.com/us/blog/threat-insight/more-cves-same-playbook-2026-vulnerability-exploitation-wild"}]}]}