CVE-2026-70005
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a netw
CVSS
5.9
Medio
EPSS
0.6%
p46
KEV
—
Exploit Today
14
0-100
Publicado: 13 oct 2026 · Última mod.: 14 oct 2026 · CWE-1390
0.6%EPSS · 30 días0.6%
2026-10-142026-10-21
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-881017.8 ALT10.1%
——3Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.6dCVE-2026-859395.3 MED30.5%
——9Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.7dCVE-2026-859227.4 ALT44.4%
——13Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.6dCVE-2026-853767.8 ALT19.1%
——6Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.6dCVE-2026-853287.0 ALT11.8%
——4Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.6dCVE-2026-853236.8 MED40.5%
——12Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.6d