CVE-2026-45480 Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network

Description

Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure Active Directory	Versions not published

Other CVEs of Azure Active Directory

The 5 CVEs of Azure Active Directory →

CVE-2026-50481 Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate… 9.9 Critical CVE-2026-50653 Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny… 7.5 High CVE-2026-50652 Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a… 7.5 High CVE-2021-42306 An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data… 8.1 High