CVE-2026-42901

Description

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

Affected Platforms

Weakness Type

CWE-346

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42901