Sign in

10.0 Critical

CVE-2026-42901 Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network

Description

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Entra	Versions not published

The 14 CVEs of Microsoft Entra →

CVE-2026-83941 Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network 9.9 Critical CVE-2026-62916 Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to… 9.1 Critical CVE-2026-69836 Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network 10.0 Critical CVE-2026-69851 Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over… 9.9 Critical

Do you use Microsoft Entra?

Track this CVE Watch Microsoft Entra Check my SBOMs

www.cveye.io/en/cve/CVE-2026-42901

Timeline

Published May 22, 2026
Last modified August 10, 2026

References

Microsoft Entra ID Elevation of Privilege Vulnerability msrc.microsoft.com

Track this CVE