CVE-2026-80092

MEDIUMCVSS 5.31% EPSS

Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.

Published 2026-10-16 · last modified 2026-10-20

Affected products

VendorProduct
microsoftmicrosoft-identity-web

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.