CVE-2026-96252

Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. An attacker could impersonate a trusted identity.

An attacker could impersonate a trusted identity or service, potentially leading to unauthorized access to resources and bypass of authentication mechanisms.

Immediately apply Microsoft security patches for AD FS and verify the trust and signing certificate configuration.