Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
CVE-2026-96207: Microsoft Partner Center lets attacker gain higher rights
CVE-2026-96207 · published 10 days ago
Summary
The Microsoft Partner Center web service does not correctly check digital certificates, so a malicious person could trick the system and increase their access level. This could let them view or change data they shouldn’t see. Apply the latest Microsoft update or patch and verify that only trusted certificates are accepted.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | microsoft partner center | - |
| microsoft | partner_center |
All versions
cpe:2.3:a:microsoft:partner_center:-:*:*:*:*:*:*:* |
Original advisory text
Microsoft Partner Center Elevation of Privilege Vulnerability
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96207 vendor-advisory patch
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-295Improper Certificate Validation
Timeline
Published8 Oct 2026
Updated16 Oct 2026
First seen8 Oct 2026
Track software like this
Free during beta