Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

Azure Privileged Identity Management lets attacker gain higher rights

CVE-2026-114162 · published 1 day ago
Summary

Azure Privileged Identity Management can be tricked into granting users more access than they should have. This means an attacker who already has some permission could increase their rights across the network, potentially accessing sensitive data or systems. Apply the latest updates from Microsoft and review access controls to ensure only appropriate permissions are granted.

What to do
  • Update microsoft azure privileged identity management (pim) to version 2.0.32.2053 or later.
Affected software
VendorProductAffected versions
microsoft azure privileged identity management (pim) < 2.0.32.2053
Original advisory text
Microsoft Graph Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.1 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-863Incorrect Authorization
Timeline
Published10 Nov 2026
Updated12 Nov 2026
First seen10 Nov 2026
Sources
CVE-2026-114162 · NVD
CVE-2026-114162 · MITRE
Track software like this
Free during beta