CVE-2026-62869

Microsoft · Published August 6, 2026

8.8

CVSS v3.1

HIGH

Patch availableGet patch

Description

Azure Entra ID Spoofing Vulnerability. Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.

Affected Products

Microsoft Entra ID

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C