SEPTEMBER 9, 2026
Live Feed
Back to database
Case File

CVE-2026-62916

CRITICAL · CVSS 9.1 EPSS 0.58%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-08

CyberRota Analysis

AI-Generated

Microsoft Entra ID is vulnerable to an authentication bypass that enables unauthorized attackers to elevate their privileges over a network. This critical flaw poses a significant risk to organizations relying on Microsoft Entra ID for identity management and should be prioritized for immediate remediation by IT security teams.

CVE
CVE-2026-62916
Severity
CRITICAL
CVSS
9.1
EPSS
0.58%
Microsoft

Original NVD Description

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)