CVE Catalog
CVE-2026-62873
CriticalCVSS 9.8Summary
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker can forge signatures, potentially leading to unauthorized access to administrative functions and compromise of the entire Microsoft 365 tenant.
Recommendation
Apply security updates provided by Microsoft for Admin Center and enable additional signature verification mechanisms.
Original NVD description (English source)
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.