May 2026: Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVE-2026-33843 Published on May 22, 2026
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
Weakness Type
Authentication Bypass Using an Alternate Path or Channel
A product requires authentication, but the product has an alternate path or channel that does not require authentication.
Products Associated with CVE-2026-33843
Want to know whenever a new CVE is published for Microsoft Entra Id? stack.watch will email you.
Affected Versions
Microsoft Entra Version - is affected by CVE-2026-33843Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.