Oct 2026: Microsoft Identity Web Elevation of Privilege Vulnerability
CVE-2026-80092 Published on October 16, 2026
Microsoft Identity Web Elevation of Privilege Vulnerability
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.
Weakness Type
Authentication Bypass by Assumed-Immutable Data
The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker.
Products Associated with CVE-2026-80092
Want to know whenever a new CVE is published for Microsoft Identity Web? stack.watch will email you.
Affected Versions
microsoft-identity-web:- Version 1.0.0 and below 4.16.1 is affected.