CVE-2026-45480NVD

Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.

Severity Level

CRITICAL(10.0)

Published Date

Jun 19, 2026

Last Modified

Jun 19, 2026

Exploitation Status

No confirmed exploitation yet

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeChanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh