← Database
CVE-2026-50684
MEDIUM
CVSS: 4.8
Published: 2026-07-14
Modified: 2026-07-21
Description
Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.
Affected Platforms
Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2025Microsoft Windows Server 2022Microsoft Windows 10 1809Microsoft Windows Server 2012Microsoft Windows 10 1607