Microsoft Active Directory Services 0-Day Vulnerability Actively Exploited in the Wild

Microsoft has released security updates for CVE-2026-56155, an actively exploited elevation-of-privilege vulnerability in Active Directory Federation Services (AD FS). This flaw allows an authenticated local attacker with low privileges to gain administrator-level access on affected systems. CVE-2026-56155 stems from insufficient granularity in access control within AD FS, a Microsoft service commonly utilized by organizations for […] The post Microsoft Active Directory Services 0-Day Vulnerability Actively Exploited in the Wild appeared first on Cyber Security News.