OAuth2

Microsoft Azure Active Directory B2C Authentication Bypass Flaw Enables Remote Privilege Escalation

Microsoft fixes critical CVSS 9.1 flaw CVE-2026-33843 in Azure AD B2C and Microsoft Entra ID allowing unauthenticated network attackers to elevate privileges.