Is CVE-2026-59115 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-59115?

CVE-2026-59115 has a CVSS v3 severity of CRITICAL (9.9).

CVE-2026-59115 affects entra_provisioning_service.

Back

Description

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.