CVE-2026-35431

CRITICAL WAF: Medium
CVSS 10.0 Published: 2026-04-23
CWE-918

Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.

WAF Coverage Analysis

Server-Side Request Forgery (SSRF) Medium WAF Coverage

OWASP: A10:2021 SSRF

934xxx - Node.js / Generic Injection

Affected Software

VendorProductVersion
microsoftentra_id-

References

Back to CVE Database