CVE-2026-96222

Improper certificate validation in Active Directory Federation Services (AD FS) exposes the system to spoofing attacks, enabling unauthorized users to impersonate legitimate entities over the network. Organizations utilizing AD FS should prioritize addressing this vulnerability to mitigate potential security breaches and protect sensitive data. Immediate action is recommended for those in sectors where identity and access management are critical.