entra_connect vulnerabilities

CVEs whose affected-version data names the entra_connect package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-65673High· 7.8

1mo ago

Microsoft Entra Connect Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Microsoft Entra ConnectEPSS 0.32%via CVEORG