CVE-2026-108131

Vendor

Microsoft

Product

Active Directory / Entra ID

CVSS

7.5

EPSS

0.009 (p59)

Exposure class

Identity

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   CVE NVD 18d ago

   No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

   No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

   CVSS 7.5 CVE-2026-108131 Microsoft
2. 38
   Advisory MSRC 15d ago

   CVE-2026-108131 Active Directory Federation Services (AD FS) Spoofing Vulnerability

   CWE added. Informational change only.

   CVE-2026-108131 Microsoft
3. 19
   Qualys TRU Qualys 18d ago

   Microsoft Patch Tuesday, October 2026 Security Update Review

   Microsoft has released its October 2026 Patch Tuesday security updates, addressing vulnerabilities across its products and services. As organizations continue to navigate an evolving threat landscape, applying security patches…

   Fix available CVE-2026-96951CVE-2026-108398CVE-2026-105016+57 more Microsoft