EXPOSURES › CVE-2026-56155
CVE-2026-56155
HIGH ⌖ ON CISA KEV · EXPLOITEDAuthorized attackers can elevate privileges in Microsoft AD FS due to insufficient access control granularity.
An Active Directory Federation Services (AD FS) vulnerability in Microsoft's product allows authorized attackers to escalate their privileges locally. This could lead to unauthorized access and control over systems.
Shame score — An authorized attacker can exploit a local elevation of privilege vulnerability, posing a significant security risk to organizations relying on AD FS.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |