CVE-2026-59115

—

CVSS 3.1

9.9 critical

EPSS

<1%p53

Published

Aug 7, 2026 (Aug 7, 2026)

Modified

Aug 7, 2026

Description

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

Vendors: microsoft
Products: entra provisioning service
Weakness: CWE-35
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news1 stories

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply

The Hacker NewsAug 10, 15:03 UTC · Aug 10, 2026Ransomware in the wildCVE-2026-34348 CVE-2026-18497 CVE-2026-63508+43 CVEs1

60