CVE-2026-40379

CRITICAL NVD

CVSS Score 9.3

Severity CRITICAL

Published May 12, 2026

Vendor unknown

Description

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.