CVE-2026-108131Vulnerability
Reported by 4 independent sources · first reported by SANS Internet Storm Center · last reported
Last reported 10 days ago
higher than 54% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
4 reports, newest first · the exact sentence from each-
Boletín mensual de seguridad de Microsoft de octubre de 2026“Las vulnerabilidades CVE-2026-96222 y CVE-2026-108131 afectan a Active Directory Federation Services y podrían permitir la suplantación de identidad.”
-
Microsoft Patch Tuesday, October 2026 Security Update Review“CVE-2026-108131 Active Directory Federation Services (AD FS) Spoofing Vulnerability No CWE for this issue in Active Directory Federation Services (AD FS) allows an unauthenticated attacker to perform spoofing over a network.”
-
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities“CVE-2026-96222 and CVE-2026-108131 are spoofing vulnerabilities that affect Active Directory Federation Services (AD FS).”
-
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)“CVE-2026-108131”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-96951, CVE-2026-70571, CVE-2026-96222, CVE-2026-108400, CVE-2026-62840, CVE-2026-105718, CVE-2026-100215, CVE-2026-100209, CVE-2026-100210, CVE-2026-100211, CVE-2026-97739, CVE-2026-97741, CVE-2026-97742, CVE-2026-97745, CVE-2026-97753, CVE-2026-97755, CVE-2026-97756, CVE-2026-97758, CVE-2026-97759, CVE-2026-97761
Thanks — we review every report.