Sep 2026: Microsoft Entra ID Elevation of Privilege Vulnerability
CVE-2026-62916 Published on September 3, 2026

Microsoft Entra ID Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

Vendor Advisory NVD

Weakness Type

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.


Products Associated with CVE-2026-62916

Want to know whenever a new CVE is published for Microsoft Entra Id? stack.watch will email you.

Microsoft Entra Id
 

Affected Versions

Microsoft Entra Version - is affected by CVE-2026-62916