{"id":"CVE-2026-114162","published":"2026-11-10T19:19:09.807","lastModified":"2026-11-10T20:18:02.503","description":"Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114162","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A privilege escalation flaw in Microsoft Graph due to incorrect authorization (CWE-863) allows an authenticated attacker with high privileges to gain elevated access over the network. This enables unauthorized actions beyond the attacker's assigned permissions.","exploitability":"Exploitation requires a pre-existing high-privilege account and network access; no public exploit exists, suggesting moderate technical skill is required.","blast_radius":"Successful exploitation could lead to full compromise of tenant data, unauthorized administrative actions, and lateral movement across Microsoft 365 services.","remediation":"Apply the Microsoft security update released for CVE-2026-114162; as no fixed version is specified in the description, immediately enforce least-privilege access controls and review all high-privilege user assignments per Microsoft’s authorization guidance.","detection":"Monitor Azure AD audit logs for anomalous privilege elevation events (e.g., 'Add member to role' or 'Update directory role') performed by users without expected administrative permissions; correlate with Microsoft Graph API telemetry showing unexpected scope expansion in token requests.","tags":["privilege-escalation","auth-bypass","microsoft-graph","azure-ad","network","high-impact"],"model":"garnet-coder","analyzedAt":"2026-11-11T09:58:18.854Z"}}