Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

Microsoft SSO Plugin for Jira & Confluence: Unauthorized Privilege Escalation

CVE-2026-41103 · published 5 months ago
Summary

The Microsoft SSO Plugin for Jira and Confluence has a security issue that allows an unauthorized attacker to gain higher access levels over a network. This could happen if an attacker knows the right information. To fix this, update the plugin to the latest version.

What to do
  • Update microsoft microsoft confluence saml sso plugin to version 7.4.0 or later.
  • Update microsoft microsoft jira saml sso plugin to version 1.3.3 or later.
  • Update microsoft confluence_saml_sso to version 7.4.0 or later.
  • Update microsoft jira_saml_sso to version 1.3.3 or later.
Affected software
VendorProductAffected versions
microsoft microsoft confluence saml sso plugin < 7.4.0
microsoft microsoft jira saml sso plugin < 1.3.3
microsoft confluence_saml_sso < 7.4.0
cpe:2.3:a:microsoft:confluence_saml_sso:*:*:*:*:*:*:*:*
microsoft jira_saml_sso < 1.3.3
cpe:2.3:a:microsoft:jira_saml_sso:*:*:*:*:*:*:*:*
Original advisory text
Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira &amp; Confluence allows an unauthorized attacker to elevate privileges over a network.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.1 Critical
Exploitation
5% chance of attack within 30 days
Type
CWE-303Incorrect Implementation of Authentication Algorithm
Timeline
Published12 May 2026
Updated26 Oct 2026
First seen13 May 2026
Sources
CVE-2026-41103 · NVD
CVE-2026-41103 · MITRE
Track software like this
Free during beta