CVE-2026-96252
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. An attacker could impersonate a trusted identity.
Risk Assessment
An attacker could impersonate a trusted identity or service, potentially leading to unauthorized access to resources and bypass of authentication mechanisms.
Recommendation
Immediately apply Microsoft security patches for AD FS and verify the trust and signing certificate configuration.
Other vulnerabilities in Active Directory Federation Services (AD FS)
See all- CVE-2026-85324High
Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-85321High
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-85319High
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-83646Medium
An open redirect vulnerability exists in Active Directory Federation Services (AD FS), allowing redirection to an untrusted site. An authorized attacker can exploit this to perform spoofing over a network.
- CVE-2026-50684Medium
Improper neutralization of input during web page generation (cross-site scripting) in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.
Original NVD description (English source)
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS