Review reviewCritical
CVE-2026-42901
Microsoft Microsoft Entra, entra id
Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
- CVSS
- 10
- EPSS
- 0.30% 22.4% percentile
- CISA KEV
- Not listed
- Published
- 2026.05.23