CVE-2026-40379 Microsoft Enterprise Security Token Service (ESTS) Spoofing Vulnerability

Post Reply
User avatar
admin Verified Great Britain
Site Admin
Posts: 25972
Joined: Wed Jun 11, 2025 9:20 pm

Awards

CVE-2026-40379 Microsoft Enterprise Security Token Service (ESTS) Spoofing Vulnerability

Post by admin Verified »

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.

Source: https://msrc.microsoft.com/update-guide ... 2026-40379
Top
Post Reply

Return to “Security”

Who is online

Users browsing this forum: No registered users and 0 guests