EUVD-2026-70798
GHSA-77pq-762c-pm6c
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Auth-bypass reachable remotely with no privileges or interaction and total identity compromise justifies AV:N/AC:L/PR:N/UI:N and C:H/I:H/A:H, matching the vendor vector.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionNVD
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
AnalysisAI
Privilege escalation in Microsoft Entra ID (formerly Azure Active Directory) lets a remote, unauthenticated attacker bypass authentication through an alternate path or channel and gain elevated privileges over the network. The flaw affects Microsoft's cloud identity-and-access-management service, which underpins sign-in and authorization for Microsoft 365, Azure, and countless federated third-party applications. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Per CVSS AV:N/AC:L/PR:N/UI:N, no special conditions - remote unauthenticated exploitation over the network against Microsoft Entra ID, with no user interaction and low attack complexity. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) describes the maximal remote-unauthenticated profile: no privileges, no user interaction, low complexity, and total loss of confidentiality, integrity, and availability, which is consistent with the SSVC assessment of 'Automatable: yes, Technical Impact: total.' Counterbalancing this, the EPSS score is low at 0.58% (46th percentile) and SSVC exploitation status is 'none,' meaning no public exploit identified at time of analysis and no CISA KEV listing - the high score reflects potential severity, not observed activity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Because Entra ID is a Microsoft-operated cloud service, the fix is applied by Microsoft server-side rather than by customer patching - Patch available per vendor advisory (MSRC): review https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62916 for the specific mitigation and any required tenant-side actions. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Enable mandatory multi-factor authentication (MFA) for all users immediately and configure Conditional Access policies to block high-risk sign-in attempts based on anomalous behavior; contact Microsoft support to review your tenant's configuration and escalate this CVE for priority patches. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Spoofing vulnerability in Microsoft Entra ID (formerly Azure Active Directory) enables an authenticated low-privilege ne
Azure Entra ID (formerly Azure AD) has an elevation of privilege vulnerability allowing attackers to escalate permission
Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated at
Azure Entra ID Elevation of Privilege Vulnerability. Rated critical severity (CVSS 10.0), this vulnerability is remotely
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today