9.1
Critical
CVE-2026-62916 Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to…
Description
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Entra | Versions not published |
References
- Microsoft Entra ID Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Entra
The 14 CVEs of Microsoft Entra →
CVE-2026-83941
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network
9.9
Critical
CVE-2026-69851
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over…
9.9
Critical
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network
10.0
Critical
CVE-2026-62869
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing…
8.8
High