Security Advisory

CVE-2026-35431

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-23 21:37:42

Last updated 2026-08-14 16:31:35

Assigner microsoft

CVSS score 10.0

State PUBLISHED

Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.