> CVE-2026-40379 Microsoft Enterprise Security Token Service (ESTS) Spoofing Vulnerability

[SOURCE] Microsoft Security Update Guide [DATE: 07/05/2026 14:00] [LANGUAGE: EN]

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.