CVE-2026-96207
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker can gain higher privileges in the Partner Center environment, potentially leading to unauthorized actions and security breaches.
Recommendation
Update Microsoft Partner Center to the latest version and apply security patches.
Other vulnerabilities in Microsoft Partner Center
See all- CVE-2026-24303Critical
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
- CVE-2025-65041Critical
Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69558High
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.
- CVE-2026-34327High
A vulnerability in Microsoft Partner Center allows externally controlled references to a resource in another sphere, enabling an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS