CVE-2026-96222
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1 · 7.4 High
EPSS < 1%
KEV · Not listed
Vendors
Products