cve-2026-56155

1 article · newest first

A padlock on a keyboard lit in red and green

a Windows AD FS zero-day is being exploited to escalate privileges — CVE-2026-56155, patch now

Microsoft confirmed CVE-2026-56155 in Active Directory Federation Services is being exploited in the wild. If AD FS underpins your single sign-on, this is a priority fix.

Priya Nair · 2h ago · 10 min