← Database

CVE-2026-35431

CRITICAL CVSS: 10.0 Published: 2026-04-23 Modified: 2026-06-17

Description

Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.

Affected Platforms

Microsoft Entra Id

Weakness Type

CWE-918

References