Live › vulnerability › CVE-2026-80092
Go to dashboardMicrosoft Identity Web, a library for authenticating users against Microsoft Entra ID in .NET apps, trusts data it assumed could not change, so an authenticated attacker can bypass authentication checks. The sources say an attacker who already has access can elevate privileges over the network.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.
This page as .md · .json · in your agent: get_signal("CVE-2026-80092")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.