CVE-2026-40379

CVE-2026-40379 is a Microsoft ESTS (Enterprise Security Token Service) spoofing vulnerability impacting Azure services. The connected sources confirm exposure of sensitive information to an unauthorized actor in Azure Entra ID and describe exploitation as network-based spoofing. The CVSS 3.1 scor...

CVE-2026-40379

creationtimestamp| type| source ---|---|--- 2026-05-09 08:31:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116543682808822499 2026-05-12 15:53:04+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0142 2026-05-12 16:38:43+00:00| seen|...