CVE-2026-57100
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
CVSS 3.1 · 9.9 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products