Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
An unauthenticated attacker over the network can bypass authentication controls in AAD App Proxy to elevate their privileges and gain unauthorized access with higher-level permissions.
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Apply the official security patch available from Microsoft at Update all affected Entra Application Proxy deployments to the patched version.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Feedly found the first article mentioning CVE-2026-97785 . See article
A CVSS base score of 10 has been assigned.
NVD published the first details for CVE-2026-97785
Links to Mitre Att&cks
AAD App Proxy Elevation of Privilege Vulnerability
CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability
CVE-2026-97785 - AAD App Proxy Elevation of Privilege Vulnerability
CVE-2026-97785 | Microsoft Entra Application Proxy improper authentication
CVE-2026-97785: CWE-287: Improper Authentication in Microsoft Microsoft Entra application proxy
Be the first to know critical vulnerabilities
Collect, analyze, and vulnerability reports faster using AI
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
