8.8
High
CVE-2026-62869 Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing…
Description
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Entra | Versions not published |
References
- Azure Entra ID Spoofing Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Entra
The 14 CVEs of Microsoft Entra →
CVE-2026-83941
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network
9.9
Critical
CVE-2026-62916
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to…
9.1
Critical
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network
10.0
Critical
CVE-2026-69851
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over…
9.9
Critical