CVE-2026-23663
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker could gain higher privileges in Azure Entra ID, potentially compromising the entire tenant.
Recommendation
Apply the security update from Microsoft for Azure Entra ID. Review and adjust privilege configurations.
Other vulnerabilities in Azure Entra ID
See all- CVE-2026-40379Critical
Azure Entra ID has an exposure of sensitive information that allows an unauthorized attacker to perform spoofing over a network.
- CVE-2025-59246Critical
An Elevation of Privilege vulnerability has been identified in Azure Entra ID. Technical details are not provided in the description.
- CVE-2025-59218Critical
An Elevation of Privilege vulnerability in Azure Entra ID allows an attacker to gain higher privileges in the cloud environment. Technical details were not disclosed in the description.
- CVE-2026-62869High
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
Original NVD description (English source)
Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS