NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-40379

CVSS 3.1: 7.5 high
EPSS: <1%p58
Published: May 12, 2026 · May 12, 2026
Modified: Oct 26, 2026

Analyze CVE-2026-40379 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.

Vendors: microsoft

Products: entra id

Weakness: CWE-200

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

1 story

Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026VulnerabilityExploitedCVE-2025-54518 CVE-2026-41096 CVE-2026-42826+142

60