lypp.
Forkast·

AD FS Gets Two New Spoofing CVEs the Day DKM Enforcement Activates — CVE-2026-108131 + CVE-2026-96222

Your call?
15
AD FS CVEs

Microsoft’s October 2026 Patch Tuesday shipped fifteen CVEs affecting Active Directory Federation Services. Two arrived as direct spoofing vulnerabilities: CVE-2026-108131 (CVSS 7.5, Important, token forgery) and CVE-2026-96222 (CVSS 7.4,…

Read the full story at Forkast →Follow @lypp for breaking news
Share

More news