CVE-2026-97785

Published: Ott 23, 2026 Last Modified: Ott 23, 2026

ExploitDB:

Other exploit source:

Google Dorks:

CRITICAL 10,0

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: changed

Confidentiality: high

Integrity: high

Availability: none

AI Translation Available

Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.

287

Draft

Abstraction: Class Structure: Simple

Security Scopes Affected:

Integrity Confidentiality Availability Access Control

Potential Impacts:

Read Application Data Gain Privileges Or Assume Identity Execute Unauthorized Code Or Commands

Technologies: Not Technology-Specific, Web Based, ICS/OT

Likelihood of Exploit: High

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97785