Articles Writeups CVE Programs

Sign in Start free

BUGFLARE

Threat intelligence and bug bounty research platform. Live vulnerability data, in-app writeup reading, and program tracking — aggregated from trusted public sources.

Explore

Articles Writeups CVE Programs Create account

Legal

© 2026 Bugflare. Publishers retain authorship; always verify on the source.

bugflare.site

CVE-2026-59115 · CRITICAL · Bugflare

CVE-2026-59115

CRITICAL

CVE: CVE-2026-59115 - 'Sign in to save

Sign in to like · 0

CVSS

9.9

CVSS v3.1

EPSS

0.6%

Exploit Prediction Score

Published

August 7, 2026

Exploitability

EPSS probability 0.6%

Description

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

Weaknesses

CWE-35

Affected Packages

No package data available.

Aliases

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59115

Source

Originally published by NVD (nvd.nist.gov).

CVE metadata is aggregated from public vulnerability databases. Scores and descriptions remain attributed to their origin feeds.

Open original on nvd.nist.gov →https://nvd.nist.gov/vuln/detail/CVE-2026-59115