CRITICAL

CVE-2026-77903

2026-09-17 CVSS v3.1
CVSS
9

Description

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.

Weakness (CWE)

CWE-290

EPSS Score

0.38%
Probability of exploitation in next 30 days
31.9th percentile

References

View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE