← Back to browse · API

CVE-2026-59115

Severity
CRITICAL
CVSS
9.9
EPSS
0.00635
Risk score
39.82
CISA KEV
No
PoC
No
Published
2026-08-06
Modified
2026-08-14
First seen
2026-08-07
Aliases
EUVD-2026-54317, GHSA-W2PM-FVGR-6R6G
Products
Microsoft:Microsoft Entra Provisioning Service -, microsoft:entra_provisioning_service
Sources
nvd CVE-2026-59115
euvd EUVD-2026-54317

Description

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

References