CVE-2026-56155

HIGH

CVE: CVE-2026-56155 - Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privi...Sign in to save

Exploited in the wild

CVSS

7.8

CVSS v3.1

EPSS

2.3%

Exploit Prediction Score

Published

July 14, 2026

Exploitability

Exploited in the wild (CISA KEV)

Description

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

Weaknesses

CWE-1220

Affected Packages

No package data available.

Aliases

CVE-2026-56155

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56155
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56155