CVE-2026-50481

—

CVSS 3.1

9.9 critical

EPSS

<1%p45

Published

Aug 7, 2026 (Aug 7, 2026)

Modified

Aug 7, 2026

Description

Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

Vendors: microsoft
Products: azure active directory
Weakness: CWE-471
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news1 stories

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply

The Hacker NewsAug 10, 15:03 UTC · Aug 10, 2026Ransomware in the wildCVE-2026-34348 CVE-2026-18497 CVE-2026-63508+43 CVEs1

60