CVE-2026-59115

CriticalCVSS 9.9

Published: 07/08/2026(UTC)Updated: 07/08/2026(UTC)Translated: 07/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.64%

47th percentile - higher than 47% of all known CVEs

Summary

A vulnerability in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network via '.../...//'.

Risk Assessment

Risk of unauthorized access and privilege escalation in the cloud environment.

Recommendation

Apply security updates from Microsoft and restrict access to the provisioning service.

Original NVD description (English source)

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.