CVE-2026-83674
8.1HighPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-1390
Impact
An unauthorized network attacker can spoof identities or authentication responses in Active Directory Federation Services. They need network access to the AD FS endpoint, but no prior credentials or user interaction are required.
Root cause
A weak authentication mechanism in AD FS allows spoofing of security tokens or federation requests.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Install the Microsoft security update for your Windows Server and AD FS version specified in the advisory; if you cannot patch immediately, restrict network access to the AD FS endpoints to trusted subnets.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.