CVE-2026-40379

Published: Mag 12, 2026 Last Modified: Mag 12, 2026

ExploitDB:

Other exploit source:

Google Dorks:

CRITICAL 9,3

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: required

Scope: changed

Confidentiality: high

Integrity: high

Availability: none

AI Translation Available

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.

200

Draft

Abstraction: Class Structure: Simple

Security Scopes Affected:

Confidentiality

Potential Impacts:

Read Application Data

Technologies: Mobile, Not Technology-Specific, Web Based

Likelihood of Exploit: High

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40379