Improper Authentication Vulnerability in Azure Active Directory by Microsoft
CVE-2026-45480

10CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure Active Directory
Vendor
CVE Published:
19 June 2026

What is CVE-2026-45480?

An improper authentication vulnerability in Azure Active Directory allows an unauthorized user to gain elevated privileges within a network. Attackers could exploit this flaw to bypass normal authentication processes, potentially leading to unauthorized access to sensitive data and resources. Organizations using Azure Active Directory should review their security practices and apply the latest updates as recommended by Microsoft to mitigate the risk posed by this vulnerability.

Affected Version(s)

Azure Active Directory -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.