Live › vulnerability › CVE-2026-97785
Go to dashboardMicrosoft Entra application proxy has an improper authentication flaw that lets an unauthorized attacker over the network elevate privileges. Microsoft fixed it on its cloud service, so customers have no action to take.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Entra application proxy | vendor | unknown (cloud service, no versions published) | service-side, no customer action |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
This page as .md · .json · in your agent: get_signal("CVE-2026-97785")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.