entra_provisioning_service vulnerabilities
CVEs whose affected-version data names the entra_provisioning_service package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-59115Critical· 9.9Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
▾ MidnightMicrosoft · Microsoft Entra Provisioning ServiceEPSS 0.77%via CVEORG
CVE-2026-57100Critical· 9.9Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
▾ MidnightMicrosoft · Microsoft Entra Provisioning ServiceEPSS 0.78%via CVEORG