Spoofing Vulnerability in Azure Entra ID by Microsoft
CVE-2026-62869

8.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Entra
Vendor
CVE Published:
11 August 2026

What is CVE-2026-62869?

An insufficient verification of data authenticity in Azure Entra ID poses a significant security risk, allowing an authorized attacker to execute spoofing attacks over network channels. This vulnerability can lead to unauthorized access and manipulation of sensitive information. It is critical for organizations using Azure Entra ID to immediately assess their security measures and implement necessary patches to mitigate potential threats.

Affected Version(s)

Microsoft Entra -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.