CVE-2026-42901

CriticalCVSS 10.0

Published: 22/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

An attacker can escalate privileges within Entra ID, potentially leading to account takeover and access to cloud resources.

Apply the security update from Microsoft for Microsoft Entra ID.

Original NVD description (English source)

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.