Microsoft Active Directory Services 0

Cybersecuritynews •Abinaya • July 15, 2026

Microsoft has released security updates for CVE-2026-56155, an actively exploited elevation-of-privilege vulnerability in Active Directory Federation Services (AD FS). This flaw allows an authenticated local attacker with low privileges to gain administrator-level access on affected systems. CVE-2026-56155 stems from insufficient granularity in access control within AD FS, a Microsoft service commonly utilized by organizations for […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Active Exploitation of Microsoft AD FS Vulnerability CVE-2026-56155 Detected Microsoft has confirmed the active exploitation of CVE-2026-56155, an elevation-of-privilege vulnerability in Active Directory Federation Services (AD FS). This flaw allows authenticated local attackers with low privileges to gain administrator-level access. The vulnerability was published on 2026-07-14 and added to the CISA KEV list on the same day. Additionally, CVE-2026-56164 has also been detected as exploited, with a proof-of-concept released on 2026-07-15. Organizations using affected Microsoft products are urged to apply the latest security updates. The vulnerabilities affect systems running AD FS and other Microsoft platforms. Microsoft has released updates addressing a total of 622 vulnerabilities across its products. SharePoint Server 2016 and 2019 are now unsupported as of 2026-07-14, increasing the risk for organizations still using these versions. 6 sources 73

Extracted Entities

Microsoft Active Directory Services 0

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)