7.5
High
CVE-2026-23663 Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network
Description
Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Global Secure Access (GSA) | Versions not published |
References
- Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified