← Back to browse · API

CVE-2026-42901

Severity
CRITICAL
CVSS
10.0
EPSS
0.00301
Risk score
40.11
CISA KEV
No
PoC
No
Published
2026-05-22
Modified
2026-08-10
First seen
2026-08-05
Aliases
EUVD-2026-31522, GHSA-2JPJ-7P7Q-HFQJ
Products
Microsoft:Microsoft Entra -, microsoft:entra_id
Sources
nvd CVE-2026-42901
euvd EUVD-2026-31522

Description

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

References