VULNERABILITY INTELLIGENCE

CVE-2026-42901

CVSS score10 CRITICAL

EPSS probability0.30%

CISA KEVNot currently listed

Published2026-05-22

Last modified2026-07-23

Description

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.