Skip to content

CVE record · 2 sources

CVE-2026-90452

CVSS 3.1

Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the…

Vendor: Microsoft
Product: exchange
CVSS: 3.1

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

16

CISA advisory CISA 1 Oct 2026

CISA Malcolm

The following versions of CISA Malcolm are affected: Malcolm CVSS Vendor Equipment Vulnerabilities v3 8.8 CISA CISA Malcolm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper…

CVSS 3.1 CVE-2026-90443 CVE-2026-90444 CVE-2026-90445+12 more Microsoft
0

CVE NVD 11 Sep 2026

Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the…

Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path…

CVE-2026-90452 Microsoft