VYPR
← All advisories
Critical severity9.3NVD Advisory· Published May 12, 2026· Updated May 21, 2026

CVE-2026-40379

CVE-2026-40379

Description

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.

Affected products

2
  • Microsoft/Entra ID2 versions
    cpe:2.3:a:microsoft:entra_id:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:entra_id:-:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

3