CVE-2026-40379 Microsoft Enterprise Security Token Service (ESTS) Spoofing Vulnerability
Posted: Thu May 07, 2026 3:00 pm
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.
Source: https://msrc.microsoft.com/update-guide ... 2026-40379
Source: https://msrc.microsoft.com/update-guide ... 2026-40379