CyberICT

CVE-2026-62916

Microsoft · Published September 3, 2026

CVSS v3.1

CRITICAL
Patch availableGet patch

Description

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

Affected Products

    CVSS Vector

    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N