Critical severity9.9NVD Advisory· Published Jul 2, 2026· Updated Jul 8, 2026
CVE-2026-57100
CVE-2026-57100
Description
Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
Affected products
3cpe:2.3:a:microsoft:entra_provisioning_service:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:entra_provisioning_service:-:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57100nvdVendor Advisory
News mentions
0No linked articles in our index yet.