← Database

CVE-2026-84003

HIGH CVSS: 7.4 Published: 2026-09-08 Modified: 2026-09-16

Description

Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.

Affected Platforms

Microsoft Azure\/Msal-Node

Weakness Type

CWE-294

References