MicrosoftCVE-2026-62869

Microsoft Entra: spoofing

High8.8CVE-2026-62869 · Published Aug 11, 2026 · updated Aug 13, 2026

Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Entra Product	all versions	No fix yet

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-345

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Aug 11	Copilot Chat Security Feature Bypass Vulnerability High7.1Aug 11 CVE-2026-656751.132.1	High7.1	1.132.1
Aug 11	Copilot Custom Agent Hook Remote Code Execution Vulnerability High7.8Aug 11 CVE-2026-703351.132.1	High7.8	1.132.1
Aug 11	Information disclosure vulnerability MediumAug 11 CVE-2026-472851.132.1	Medium	1.132.1
Aug 11	Fileless RCE in VS Code Web Remote Terminal via URL-Controlled NODE_OPTIONS High8.8Aug 11 CVE-2026-703361.132.1	High8.8	1.132.1
Aug 11	Visual Studio Code web deployments - environmentService.ts - RCE via NODE_OPTIONS --import from URL payload High8.8Aug 11 CVE-2026-693201.132.1	High8.8	1.132.1
Aug 11	TerminalInstance._createProcess - Workspace Trust bypass via terminal waitOnExit High7.8Aug 11 CVE-2026-692781.132.1	High7.8	1.132.1

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.