M365 Change Tracker

← All changes · security · CVE-2026-97785

CVE-2026-97785CriticalMonitor

AAD App Proxy Elevation of Privilege Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 10)

Elevation of Privilege · Critical · CVSS 10. Affects: Microsoft Entra application proxy.

CVSS 10EPSS 0.6%Security update published 2026-11-10NVD

Affected: Microsoft Entra application proxy

Change history

2026-10-25 · First captured by tracker

View at Microsoft →