View Ridge Security
Back to Cyber HoseThreat Research & Deep Dives

Microsoft Entra ID Elevation of Privilege Vulnerability

🕵️ RESEARCH & DEEP DIVES

  • ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)SANS ISC

  • light0011 cms Chapter Controller ChapterController.class.php authorizationA s...CVE ThreatInt

  • light0011 cms UEditor controller.php catchimage server-side request forgeryA ...CVE ThreatInt

  • light0011 cms Query Builder ChapterController.class.php searchChapter sql inj...CVE ThreatInt

  • Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 a...CVE ThreatInt

  • An insecure Apache configuration in ConfigServer Security & Firewall maps /us...CVE ThreatInt

  • Missing authorization vulnerability has been discovered in 2Checkout payment ...CVE ThreatInt

  • Out-of-bounds read vulnerability in Samsung Opensource Escargot allows Overre...CVE ThreatInt

  • light0011 cms Chapter Controller ChapterController.class.php _initialize auth...CVE ThreatInt

  • Microsoft Entra ID Elevation of Privilege VulnerabilityAuthentication bypass ...CVE ThreatInt

  • Power Automate Elevation of Privilege VulnerabilityServer-side request forger...CVE ThreatInt

  • Azure Cosmos DB Spoofing VulnerabilityAuthorization bypass through user-contr...CVE ThreatInt

  • Microsoft Azure Active Directory B2C Elevation of Privilege VulnerabilityAuth...CVE ThreatInt

  • Copilot Studio Elevation of Privilege VulnerabilityImproper verification of c...CVE ThreatInt

  • Azure AI Language Elevation of Privilege VulnerabilityMissing authentication ...CVE ThreatInt

  • Microsoft Fabric Elevation of Privilege VulnerabilityMissing authorization in...CVE ThreatInt

  • Microsoft Discovery Studio Information Disclosure VulnerabilityImproper neutr...CVE ThreatInt

  • MOOS-IvP Critical RCE via Buffer Overflows (CVE-2026-85437)thehackerwire.com (discovered)

  • Am I overly cautious to prohibit sending credentials by email?r/cybersecurity

  • US - TAA and Electric Critical Infrastructure restrictionsr/cybersecurity

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check