[CVE-2026-96222] Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthoriz…

Descripción técnica

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Puntuación CVSS

Score: 7.4/10 — Severidad: HIGH — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Debilidades (CWE)

CWE-295

Fuente oficial

Publicado en NIST NVD.