CVE Catalog

CVE-2026-23663

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.55%

43th percentile - higher than 43% of all known CVEs

Summary

Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.

Risk Assessment

An attacker could gain higher privileges in Azure Entra ID, potentially compromising the entire tenant.

Recommendation

Apply the security update from Microsoft for Azure Entra ID. Review and adjust privilege configurations.

Other vulnerabilities in Azure Entra ID

See all
Original NVD description (English source)

Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS