Elevation of Privilege Risk in Microsoft SSO Plugin for Jira & Confluence
CVE-2026-41103

9.1CRITICAL

Key Information:

Vendor

Microsoft
Status
Microsoft Confluence Saml Sso Plugin
Microsoft Jira Saml Sso Plugin
Vendor
CVE Published:
12 May 2026

What is CVE-2026-41103?

The Microsoft SSO Plugin for Jira and Confluence is vulnerable due to an improper implementation of its authentication algorithm. This flaw could allow attackers to elevate their privileges and gain unauthorized access within the network, leading to potential exploitation of sensitive data. Users and administrators are encouraged to apply the latest security patches to mitigate this risk.

Affected Version(s)

Microsoft Confluence SAML SSO plugin 1.0.0 < 7.4.0

Microsoft JIRA SAML SSO plugin 1.0.0 < 1.3.3

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.