CVE-2026-56155 1

Vulnerability (CVE)

CVE-2026-56155: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jul 14, 2026

Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally.

Vulnerabilities & Patching