CVE-2026-97785

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

October 22, 2026

Last Seen

October 22, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical CVE-2026-97785: AAD App Proxy Vulnerability Disclosed78.0

CVE-2026-97785, a critical vulnerability in Microsoft Entra Application Proxy, allows unauthorized attackers to elevate privileges over a network due to improper authentication. The flaw has been assigned a CVSS score of 10.0, indicating its critical severity. Currently, there is no evidence of publ...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical CVE-2026-97785: AAD App Proxy Vulnerability Disclosed

2h ago·1 sources

Related Articles (2)

CVE-2026-97785 - AAD App Proxy Elevation of Privilege Vulnerability Latest High/Critical Vulnerabilitiy Feed / 19min CVE ID : CVE-2026-97785 Published : Oct. 22, 2026, 10:20 p.m. 35 minutes ago Description : Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. Severity: 10.0 CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

cvefeed.io·2h ago

CVE-2026-97785 - Exploits & Severity

Related Entities

Improper Authentication Zero-day Exploit CWE-287 - Improper Authentication T1068 - Exploitation for Privilege Escalation Microsoft Entra Application Proxy