CVE-2026-59115Disclosure(microsoft / entra_provisioning_service)

LOWCVSS 9.9 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch microsoft entra_provisioning_service systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59115

Weakness type (CWE)

CWE-35

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

entra_provisioning_service

Threat summary

Patch or workaround signal is available
7 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 5 classified signals
General: 1 classified signal
Peaked 3d ago at 3 mentions (2026-08-07); latest day: 1
7 total mentions across 5 days

Affected systems

Vendors

microsoft

Products

entra_provisioning_service

1 version affected across 1 product

Deep dive

Activity timeline7 mentions / 5d

Signal classification3 categories

Disclosure

571.4%

General

114.3%

Patch

114.3%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-06	1	Disclosure1
2026-08-07	3	Disclosure1General1Patch1
2026-08-13	1	Disclosure1
2026-08-14	1	Disclosure1
2026-08-15	1	Disclosure1

Full discourse7 posts

Steve Waterhouse@Water_Steve45d
Patch
Pour votre information // For your information Bon weekend ! Correctifs hors-cycle (#OoB) menaçant envers les les produits logiciels de @Microsoft et @Apple déployés En provenance de l'article de @SecurityWeek ci-bas mentionné: "Trois de ces vulnérabilités, CVE-2026-63508, CVE-2026-56162 et CVE-2026-65667, ont un niveau de gravité maximal de 10/10. Quatre autres vulnérabilités, CVE-2026-50515 (RCE dans #Azure Service Bus), CVE-2026-62830 (EoP dans #Azure SRE Agent), CVE-2026-59115 (EoP dans #Entra Provisioning Service) et CVE-2026-50481 (EoP dans #ActiveDirectory) ont un score CVSS de 9,9/10. Ces quatre vulnérabilités sont exploitables à distance. Des correctifs visant à remédier à cette faille de sécurité ont été intégrés dans #macOS #Tahoe 26.6.1, #macOS #Sequoia 15.7.9 et #macOS #Sonoma 14.8.9" 20260807 - #Microsoft, #Apple Release Fresh #SecurityUpdates https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/ #infosec #cybersecurity #secinfo #cybersecurite #cyberwar #cyberwarfare #OPSEC @infosecsw #criticalinfrastructure #infrastructureessentielle #patchmanagement #gestioncorrectifs #DQP #ASAP
Post summary
The tweet announces out-of-cycle patches for multiple high‑severity CVEs affecting Microsoft and Apple software, detailing the CVE identifiers, severity scores, and the specific macOS releases that contain the fixes.
01010161
3.9K followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker38d
Disclosure
【緊急】CVE-2026-59115 マイクロソフトのMicrosoft Entra Provisioning Serviceに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/08/10/cve-2026-59115-microsoft-entra-provisioning-service/ #IT #Security #cybersecurity
Post summary
The post announces the discovery of CVE-2026-59115 affecting Microsoft Entra Provisioning Service and urges immediate action, but it does not provide technical details, PoC, or evidence of active exploitation.
0001067
213 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker38d
Disclosure
【緊急】CVE-2026-59115 マイクロソフトのMicrosoft Entra Provisioning Serviceに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/08/10/cve-2026-59115-microsoft-entra-provisioning-service/ #IT #Security #cybersecurity
Post summary
The post alerts about a critical vulnerability (CVE-2026-59115) in Microsoft Entra Provisioning Service and urges immediate attention.
0000054
213 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker39d
Disclosure
【緊急】CVE-2026-59115 マイクロソフトのMicrosoft Entra Provisioning Serviceに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/08/10/cve-2026-59115-microsoft-entra-provisioning-service/ #IT #Security #cybersecurity
Post summary
The post announces the existence of CVE-2026-59115, a severe vulnerability in Microsoft Entra Provisioning Service, and urges immediate action, but provides no technical or actionable details.
0000039
212 followersView on X
The Circuitry@thecircuitry_45d
Disclosure
Microsoft disclosed critical vulnerability CVE-2026-59115 in the Entra Provisioning Service. The path traversal issue enables an authorized attacker to elevate privileges over a network. It receives a CVSS score of 9.9 and was published on August 6, 2026. https://t.co/K9auJ2Wpe2
Post summary
Microsoft announced a critical CVE-2026-59115 in Entra Provisioning Service, highlighting a path traversal flaw that allows privilege escalation for authorized attackers, accompanied by a high CVSS score of 9.9.
0000047
28 followersView on X
CVE@CVEnew46d
General
CVE-2026-59115 '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. https://www.cve.org/CVERecord?id=CVE-2026-59115
Post summary
The message simply reports that CVE-2026-59115 allows privilege escalation in Microsoft Entra Provisioning Service.
00000896
57.9K followersView on X
Windows Forum@windowsforum46d
Disclosure
⚠️ Microsoft published an Entra elevation-of-privilege CVE with no attack path, score, affected builds, fix, or mitigation. Admins get a vulnerability alert and the investigative equivalent of a shrug. https://windowsforum.com/security-alerts.84/cve-2026-59115-entra-provisioning-flaw-has-no-fix-details.441872/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftEntra #CloudSecurity #IdentitySecurity https://t.co/Our9oNu44F
Post summary
The tweet announces a new Microsoft Entra elevation‑of‑privilege CVE (cve‑2026‑59115) but notes that Microsoft has not released a score, affected builds, fix, or mitigation, leaving admins with only a notification and uncertainty.
0000050
1.3K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	entra_provisioning_service	-	-	-

Explore more

Back to dashboard microsoft CVEs entra_provisioning_service vulnerabilities

What researchers are saying

CVE-2026-59115

Steve Waterhouse[verified]@Water_StevePatch

The tweet announces out-of-cycle patches for multiple high‑severity CVEs affecting Microsoft and Apple software, detailing the CVE identifiers, severity scores, and the specific macOS releases that contain the fixes.

The Circuitry[verified]@thecircuitry_Disclosure

Microsoft announced a critical CVE-2026-59115 in Entra Provisioning Service, highlighting a path traversal flaw that allows privilege escalation for authorized attackers, accompanied by a high CVSS score of 9.9.

Windows Forum[verified]@windowsforumDisclosure

The tweet announces a new Microsoft Entra elevation‑of‑privilege CVE (cve‑2026‑59115) but notes that Microsoft has not released a score, affected builds, fix, or mitigation, leaving admins with only a notification and uncertainty.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The post announces the discovery of CVE-2026-59115 affecting Microsoft Entra Provisioning Service and urges immediate action, but it does not provide technical details, PoC, or evidence of active exploitation.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The post alerts about a critical vulnerability (CVE-2026-59115) in Microsoft Entra Provisioning Service and urges immediate attention.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The post announces the existence of CVE-2026-59115, a severe vulnerability in Microsoft Entra Provisioning Service, and urges immediate action, but provides no technical or actionable details.

CVE@CVEnewGeneral

The message simply reports that CVE-2026-59115 allows privilege escalation in Microsoft Entra Provisioning Service.