CVE-2026-62873

—

CVSS 3.1

9.8 critical

EPSS

<1%p43

Published

Aug 7, 2026 (Aug 7, 2026)

Modified

Aug 7, 2026

Description

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

Vendors: microsoft
Products: windows admin center
Weakness: CWE-347
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.