microsoft entra id sso login vulnerabilities and fixes
Recent CVEs affecting microsoft entra id sso login, with upgrade or downgrade steps. 1 tracked.
Also searched as: microsoftentraidssologin.
microsoft entra id sso login has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-02-04. Highest priority: CVE-2026-0948 (score 36/100).
- CVE-2026-0948 MEDIUM 6.5 UPGRADE Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login
FAQ
How do I fix microsoft entra id sso login vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is microsoft entra id sso login being exploited right now?
None of the tracked microsoft entra id sso login CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which microsoft entra id sso login CVE should I patch first?
CVE-2026-0948 currently ranks highest (36/100): Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login .