Software
a Windows AD FS zero-day is being exploited to escalate privileges — CVE-2026-56155, patch now
Microsoft confirmed CVE-2026-56155 in Active Directory Federation Services is being exploited in the wild. If AD FS underpins your single sign-on, this is a priority fix.
Priya Nair · 2h ago · 10 min