> CVE-2026-35431 Microsoft Entra ID Entitlement Management Spoofing Vulnerability

[SOURCE] Microsoft Security Update Guide [DATE: 23/04/2026 14:00] [LANGUAGE: EN]

Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.