Skip to main content

Microsoft Entra Provisioning Service Elevation of Privilege vulnerabilities

2 published alerts for Microsoft Microsoft Entra Provisioning Service Elevation of Privilege.

Microsoft MSRC

CVE-2026-59115

Microsoft Entra Provisioning Service Elevation of Privilege vulnerability

Microsoft Entra Provisioning Service Elevation of Privilege vulnerability (CVE-2026-59115) was added to Microsoft’s security update guidance. '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-57100

Microsoft Entra Provisioning Service Elevation of Privilege vulnerability

Microsoft Entra Provisioning Service Elevation of Privilege vulnerability (CVE-2026-57100) was added to Microsoft’s security update guidance. Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.