CVE-2026-42901

CRITICAL NVD

CVSS Score 10

Severity CRITICAL

Published May 22, 2026

Vendor unknown

Description

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.