CVE-2026-104047

Vendor

Microsoft

Product

Active Directory / Entra ID

CVSS

5.3

Exposure class

Identity

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 21
   CVE NVD 25d ago

   A flaw was found in SSSD.

   A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a…

   CVSS 5.3 CVE-2026-104047 Microsoft