CVE-2026-50481

CRITICAL

Azure Active Directory Elevation of Privilege Vulnerability

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-50481 has a selected CVSS score of 9.9 (critical).

Description

Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

Description source: GitHub Advisory

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 6, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Azure Active Directory

Browse Microsoft / Azure Active Directory
CVE List-affected

References

2