CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-42901 — Origin validation error in Microsoft Entra ID allows an unauthorized attacker to...

·Source: NIST NVD

Updated:

Executive Summary

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

Analysis

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network. CVSS Score: 10. Published: 2026-05-22T23:16:55.670.

Indicators of Compromise (1)

CVE (1)
CVE-2026-42901
Source Attribution

Originally published by NIST NVD on May 22, 2026. Verified by: NIST.

Related Threats