CVE-2026-70005
Medium · 5.9CVSS
5.9
EPSS
0.6%
Published
Oct 13, 2026
CISA due date
—
The record
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115967 Weak Authentication vulnerability in Hamid Alinia Login with phone number… CWE-1390
- CVE-2025-30414 Local privilege escalation due to improper authentication. CWE-1390
- CVE-2026-85939 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security… CWE-1390
- CVE-2026-83840 Weak authentication in Windows Error Reporting allows an authorized attacker to elevate… CWE-1390
- CVE-2026-83674 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390
- CVE-2026-83657 Weak authentication in Windows Modern Device Management (MDM) allows an authorized… CWE-1390
- CVE-2026-83586 Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows… CWE-1390
- CVE-2026-83511 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390