Oct 2026: Active Directory Federation Services (AD FS) Spoofing Vulnerability
CVE-2026-96222 Published on October 13, 2026

Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Vendor Advisory NVD

Weakness Type

Improper Certificate Validation

The software does not validate, or incorrectly validates, a certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host.

Products Associated with CVE-2026-96222

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft System Security Cryptography Xml

Microsoft Windows 10

Microsoft Windows Server 2019

Microsoft Windows Server 2022

Microsoft Windows Server 2025

Microsoft Windows Server 2016

Microsoft Windows Server 2012 R2

Microsoft Visual Studio 2026 Version 18 10

Microsoft Visual Studio 2022

Microsoft Net

Microsoft .NET Framework

Affected Versions

Microsoft .NET Framework 3.5:

Version 3.5.0 and below 2.0.50727.9188 AND 3.0.30729.9171 is affected.

Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2:

Version 3.0.0.0 and below 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 is affected.

Microsoft .NET Framework 3.5 AND 4.7.2:

Version 4.7.0 and below 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 is affected.

Microsoft .NET Framework 3.5 AND 4.8:

Version 4.8.0 and below 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 is affected.

Microsoft .NET Framework 3.5 AND 4.8.1:

Version 4.8.1 and below 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 is affected.

Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2:

Version 4.7.0 and below 4.7.4150.0 is affected.

Microsoft .NET Framework 4.8:

Version 4.8.0 and below 4.8.4811.0 is affected.

Microsoft .NET Framework 4.8.1:

Version 4.8.0.0 and below 4.8.9363.0 is affected.

Microsoft Visual Studio 2022 version 17.14:

Version 17.14.0 and below 17.14.42 is affected.

Microsoft Visual Studio 2026 version 18.10:

Version 18.10.0 and below 18.10.4 is affected.

Microsoft System.Security.Cryptography.Xml:

Version 10.0.0 and below 8.0.5 is affected.

Microsoft Windows 10 Version 1607:

Version 10.0.14393.0 and below 10.0.14393.9612 is affected.

Microsoft Windows 10 Version 1809:

Version 10.0.17763.0 and below 10.0.17763.9376 is affected.

Microsoft Windows Server 2012 R2:

Version 6.3.9600.0 and below 6.3.9600.23470 is affected.

Microsoft Windows Server 2012 R2 (Server Core installation):

Version 6.3.9600.0 and below 6.3.9600.23470 is affected.

Microsoft Windows Server 2016:

Version 10.0.14393.0 and below 10.0.14393.9612 is affected.

Microsoft Windows Server 2016 (Server Core installation):

Version 10.0.14393.0 and below 10.0.14393.9612 is affected.

Microsoft Windows Server 2019:

Version 10.0.17763.0 and below 10.0.17763.9376 is affected.

Microsoft Windows Server 2019 (Server Core installation):

Version 10.0.17763.0 and below 10.0.17763.9376 is affected.

Microsoft Windows Server 2022:

Version 10.0.20348.0 and below 10.0.20348.5761 is affected.

Microsoft Windows Server 2025:

Version 10.0.26100.0 and below 10.0.26100.33650 is affected.

Microsoft Windows Server 2025 (Server Core installation):

Version 10.0.26100.0 and below 10.0.26100.33650 is affected.

Oct 2026: Active Directory Federation Services (AD FS) Spoofing VulnerabilityCVE-2026-96222 Published on October 13, 2026

Weakness Type

Improper Certificate Validation

Products Associated with CVE-2026-96222

Affected Versions

Oct 2026: Active Directory Federation Services (AD FS) Spoofing Vulnerability
CVE-2026-96222 Published on October 13, 2026