← All advisories

Critical severity9.0NVD Advisory· Published Sep 17, 2026· Updated Sep 25, 2026

CVE-2026-77903

CVE-2026-77903

Description

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.

Affected products

2

Microsoft/Dataverse2 versions
cpe:2.3:a:microsoft:dataverse:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:dataverse:-:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77903nvdVendor Advisory

News mentions

1

Microsoft: 24 Azure & AI Vulnerabilities Disclosed, Including Critical Privilege Escalation Flaws
Vypr Intelligence · Sep 18, 2026