Veille CVE

Recherche « Microsoft Entra »

23 CVE

Critique 7 Élevée 11 Moyenne 5 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Entra » ✕
  1. CVE-2026-97785 10.0 Critique

    Microsoft Entra application proxy

    Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.

  2. CVE-2026-111895 6.8 Moyenne

    thorsten phpMyFAQ

    phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable preferred_username claim and whose AuthEntraId::create() ignores the duplicate-login exception while continuing with the existing local account. Attackers controlling an Entra identity in the configured tenant with a matching preferred_username can take over that local account, including super-admin accounts.

  3. CVE-2026-110112 8.1 Élevée

    Finsys dockhand

    Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate the mapped admin group and log in as Dockhand administrators.

  4. CVE-2026-105728 7.5 Élevée

    Microsoft Dynamics NAV 2018

    Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.

  5. CVE-2026-105727 8.8 Élevée

    Microsoft Dynamics NAV 2018

    Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

  6. CVE-2026-102226 8.8 Élevée

    Microsoft Dynamics NAV 2018

    Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

  7. CVE-2026-100214 8.8 Élevée

    Microsoft Dynamics NAV 2017 · Microsoft Dynamics NAV 2018

    Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.

  8. CVE-2026-104047 5.3 Moyenne

    Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 8

    A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause unauthorized information disclosure from the directory.

  9. CVE-2026-105792 6.5 Moyenne

    microsoft UFO

    Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task_result/{task_name} endpoint calls SessionManager.get_result_by_task() in ufo/server/services/session_manager.py, which acquires a non-reentrant lock and then calls SessionManager.get_result() to acquire the same lock again when the task name maps to a session. An authenticated caller who knows or creates a mapped task name can therefore block the request indefinitely, and in the default single-process server configuration the blocked event-loop thread prevents other HTTP, WebSocket, and dependent background interactions. Unknown task names do not reach the nested call and are not affected. This issue is fixed in version 3.0.9.

  10. CVE-2026-104040 6.1 Moyenne

    Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 8

    A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included in Microsoft Graph Open Data Protocol (OData) queries. A low-privileged local user can exploit this flaw by submitting a crafted search request, altering query filters to broaden user or group searches. This can lead to information disclosure by retrieving unintended directory objects, as well as a Denial of Service (DoS) through excessive processing and cache population.

  11. CVE-2026-83941 8.8 Élevée

    Microsoft Entra · Microsoft entra id

    Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.

  12. CVE-2026-83711 10.0 Critique

    Microsoft Entra · Microsoft azure active directory b2c

    Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.

  13. CVE-2026-62916 9.8 Critique

    Microsoft Entra · Microsoft entra id

    Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

  14. CVE-2026-84672 8.8 Élevée

    Jenkins Project Jenkins Microsoft Entra ID (previously Azure AD) Plugin

    Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID and its display name, allowing attackers who can create an Entra group with a colliding display name to gain the permissions configured for a privileged group.

  15. CVE-2026-69851 9.9 Critique

    Microsoft Entra · Microsoft entra id

    Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

  16. CVE-2026-69836 10.0 Critique

    Microsoft Entra · Microsoft entra id

    Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

  17. CVE-2026-73298 8.7 Élevée

    microsoft Container-Migration-Solution-Accelerator

    The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the Container Migration Solution Accelerator, specifically an authenticated IDOR (Insecure Direct Object Reference) that allows users to read, write, and delete processes belonging to other authenticated users. The issue affects multiple API endpoints, where ownership checks are missing, enabling unauthorized access and modification of migration data across users within the same organization. The vulnerability is present in both process and file management APIs, and the application relies on Entra ID authentication but lacks proper authorization controls between users. Authenticated users are able to access, modify, and delete processes and files belonging to other users without proper authorization checks.

  18. CVE-2026-65673 7.8 Élevée

    Microsoft Entra Connect

    Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network.

  19. CVE-2026-62869 8.8 Élevée

    Microsoft Entra · Microsoft entra id

    Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.

  20. CVE-2026-40375 6.5 Moyenne

    Microsoft Dynamics 365 Business Central 2024 Release Wave 2 · Microsoft Dynamics 365 Business Central 2026 Release Wave 1 · Microsoft Dynamics 365 Business Central Release Wave 1 2025 · Microsoft Dynamics 365 Business Central Release Wave 2 2025

    Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.

  21. CVE-2026-59115 9.9 Critique

    Microsoft Entra Provisioning Service

    '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

  22. CVE-2026-54733 9.3 Critique

    microsoft o365-moodle

    The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin local_o365 Teams SSO endpoint sso_login.php base64-decodes a JWT payload and authenticates users from the upn claim without verifying the JWT signature, allowing an unauthenticated attacker to forge a token and obtain a Moodle session as an O365-authenticated user. This issue is fixed in versions 4.5.6, 5.0.5, and 5.1.1.

  23. CVE-2026-57100 8.8 Élevée

    Microsoft Entra Provisioning Service

    Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.