CVE-2026-83511: Active Directory Federation Services (AD FS) Spoofing Vulnerability
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Other sources
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23470Patch KB5126836 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9612Patch KB5126868 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5761Patch KB5126655 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9376Patch KB5126651 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33650Patch KB5126646
Event History
Frequently Asked Questions
Who is exposed to this issue?
Organizations running Active Directory Federation Services (AD FS) on the listed Microsoft Windows platforms are potentially exposed. The provided data does not identify specific AD FS versions, roles, or configurations.
What does an attacker need to exploit it?
An attacker can attempt exploitation remotely over a network and does not need prior privileges or user interaction. Exploitation has high attack complexity, indicating additional conditions or preparation are required.
What is the potential impact?
Successful exploitation enables spoofing and is rated as having high confidentiality and integrity impact. The supplied severity vector indicates no availability impact.
How can I determine whether systems are affected?
Identify systems running AD FS and compare their Windows platform and update status against the Microsoft advisory for CVE-2026-83511. The provided information does not include affected build numbers or a detection method.