CVE Catalog
CVE-2026-33843
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.47%
38th percentile - higher than 38% of all known CVEs
Summary
Microsoft Azure Active Directory B2C contains an authentication bypass vulnerability using an alternate path or channel, allowing an unauthorized attacker to elevate privileges over a network.
Risk Assessment
Attackers can gain unauthorized access to resources and elevate privileges, potentially compromising the entire Azure AD B2C tenant.
Recommendation
Apply security updates provided by Microsoft for Azure AD B2C.
Original NVD description (English source)
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.