Improper Authentication Vulnerability in Microsoft Defender for Identity

CVE-2025-26685

What is CVE-2025-26685?

A flaw has been identified in Microsoft Defender for Identity where improper authentication mechanisms can be exploited by unauthorized attackers. This vulnerability allows malicious entities to perform spoofing attacks over adjacent networks, potentially compromising sensitive data and system integrity. It is crucial for organizations using Microsoft Defender for Identity to understand the implications of this vulnerability and take necessary precautions to secure their environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

News Articles

Forbes

CVE-2025-33073CVE-2025-26685

Update Windows Now — Microsoft Confirms System Takeover Danger

Microsoft has issued a warning that Windows hackers could gain system privileges using this authentication relay attack — an update is available; apply now.

NetSPI

CVE-2025-26685

CVE-2025-26685 – Spoofing to Elevate Privileges with Microsoft Defender for Identity 

Discover how NetSPI uncovered and reported a vulnerability in Microsoft Defender for Identity that allowed unauthenticated attackers to perform spoofing and elevate privileges.

References