CVE-2026-83511
High · 7.4CVSS
7.4
EPSS
0.7%
Published
Oct 13, 2026
CISA due date
—
The record
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115967 Weak Authentication vulnerability in Hamid Alinia Login with phone number… CWE-1390
- CVE-2025-30414 Local privilege escalation due to improper authentication. CWE-1390
- CVE-2026-85939 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security… CWE-1390
- CVE-2026-83840 Weak authentication in Windows Error Reporting allows an authorized attacker to elevate… CWE-1390
- CVE-2026-83674 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390
- CVE-2026-83657 Weak authentication in Windows Modern Device Management (MDM) allows an authorized… CWE-1390
- CVE-2026-83586 Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows… CWE-1390
- CVE-2026-70005 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390