takenaka hiroya@Joe_Biden_ja
CVE-2026-97785（CVSS 10）。Microsoft Entra のApp Proxyで認証なしに権限を昇格できた不備です。Microsoft側で緩和済みで、利用者側の作業は不要とされています。 https://cve.autoarticles.net/cve/CVE-2026-97785
0000022
557 followersView on X
CVE-2026-97785
LOWCVSS 10.0 · CRITICALImmediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
0.0/ 10 priority
Sources & remediation
Weakness type (CWE)
CWE-287
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE