CVE-2026-56155

Summary dbcve.org

This vulnerability in Active Directory Federation Services (AD FS) stems from insufficient granularity of access control, allowing an authorized user to elevate their privileges locally on the affected system. The attacker already has some level of authorized access but can exploit the coarse access control mechanisms to gain higher-level privileges.

Mitigation

Apply Microsoft security updates for AD FS when available and review AD FS role assignments and access control policies to implement least-privilege principles. Conduct a thorough audit of existing AD FS user accounts and their permission levels.