Authentication Bypass in Microsoft Entra ID from Microsoft
CVE-2026-62916

9.1CRITICAL

Key Information:

Vendor

Microsoft
Status
Microsoft Entra
Vendor
CVE Published:
3 September 2026

What is CVE-2026-62916?

An authentication bypass vulnerability in Microsoft Entra ID allows unauthorized attackers to exploit alternate paths or channels, leading to potential privilege escalation within a network. This flaw can enable malicious actors to gain elevated access and compromise sensitive data and operations, highlighting the importance of timely updates and security patches to safeguard your systems.

Affected Version(s)

Microsoft Entra -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.