Skip to content
Critical CVE-2026-97785: AAD App Proxy Vulnerability Disclosed

Critical CVE-2026-97785: AAD App Proxy Vulnerability Disclosed

First seen 22 Oct 2026, 23:41 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 23, 2026 at 01:12 UTC
  • •CVE-2026-97785 has a CVSS score of 10.0, marking it as critical.
  • •The vulnerability allows unauthorized privilege escalation via improper authentication.
  • •No public proof-of-concept or active exploitation has been reported yet.

CVE-2026-97785, a critical vulnerability in Microsoft Entra Application Proxy, allows unauthorized attackers to elevate privileges over a network due to improper authentication. The flaw has been assigned a CVSS score of 10.0, indicating its critical severity. Currently, there is no evidence of public proof-of-concept exploits or in the wild. Organizations using affected versions of AAD App Proxy are advised to apply the official security patch released by Microsoft. The vulnerability poses a significant risk as it could allow attackers to gain unauthorized access with higher-level permissions. Affected systems include all deployments of the Microsoft Entra Application Proxy. The vulnerability was published on October 22, 2026, and has been categorized under CWE-287: Improper Authentication.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-22
CVE-2026-97785 published
Microsoft disclosed a critical vulnerability in AAD App Proxy allowing unauthorized privilege escalation.
Feedly
2026-10-22
Patch released
Microsoft released a security patch for all affected Entra Application Proxy deployments.
cvefeed.io

More articles in this cluster (6)

Following this threat?

Track CVE-2026-97785 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 4

Common questions

What is CVE-2026-97785?
CVE-2026-97785 is a critical vulnerability in Microsoft Entra Application Proxy that allows unauthorized privilege escalation.
How can I mitigate this vulnerability?
Apply the official security patch released by Microsoft for all affected Entra Application Proxy deployments.
Is there any evidence of exploitation?
Currently, there is no evidence of public proof-of-concept exploits or active exploitation reported.