CVE-2026-97785PATCHED

Microsoft · Microsoft Entra application proxy

AAD App Proxy Elevation of Privilege Vulnerability

Description

Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.

Affected Products

Vendor	Product	Versions
Microsoft	Microsoft Entra application proxy	-

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97785(vendor-advisory, patch)

Related News (2 articles)

Tier C

VulDB1d ago

CVE-2026-97785 | Microsoft Entra Application Proxy improper authentication

→ No new info (linked only)

Tier A

Microsoft MSRC1d ago

CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.110.0 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C

CISA KEV❌ No

Actively exploited❌ No

Patch available

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97785

CWECWE-287

PublishedOct 22, 2026

Last enriched1d agov2

Trending Score37

Source articles2

Independent2

Info Completeness9/14

Missing: title, epss, kev, exploit, iocs

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-96951EXPKEV

Windows Shell Security Feature Bypass Vulnerability

Trending: 132

CRITICALCVE-2026-105014

Azure Pipelines Remote Code Execution Vulnerability

Trending: 51

CRITICALCVE-2026-110063

VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability

Trending: 51

HIGHCVE-2026-96185

Microsoft Exchange Online Remote Code Execution Vulnerability

Trending: 39

CRITICALCVE-2026-83938

Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability

Trending: 37

Pin to Dashboard

Verification

State: verified

Confidence: 0%

Vulnerability Timeline

CVE Published

Oct 22, 2026

Discovered by ZDM

Oct 22, 2026

Updated: description, mitreAttack

Oct 22, 2026

Patch Available

Oct 23, 2026

Version History

Last enriched 1d ago

v2Tier A1d ago

Added description detailing the improper authentication mechanism and mapped to MITRE ATT&CK technique T1548 (Abuse Elevation Control Mechanism).

descriptionmitreAttack

via Microsoft MSRC

v11d ago

Initial creation