CVE-2026-83511
HighCVSS 7.4Summary
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Risk Assessment
An attacker can impersonate trusted identities, potentially leading to unauthorized access to resources.
Recommendation
Strengthen authentication mechanisms in AD FS and apply the latest security patches.
Other vulnerabilities in Active Directory Federation Services
See all- CVE-2026-97788High
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
- CVE-2026-96222High
A vulnerability in Active Directory Federation Services (AD FS) related to improper certificate validation allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-83674High
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-83645High
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-108131High
A vulnerability in Active Directory Federation Services (AD FS) with no CWE assigned allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-56155HighActively exploited
Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-72978Medium
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-58529High
An out-of-bounds read vulnerability in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.
- CVE-2026-50647High
An infinite loop in Active Directory Federation Services (AD FS) allows an unauthorized attacker to remotely cause a denial of service (DoS).
- CVE-2026-50411High
A stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Original NVD description (English source)
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS