10.0
Critical
CVE-2026-97785 Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network
Description
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Entra application proxy | Versions not published |
References
- AAD App Proxy Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified