Vulnerabilities

CVSS

9.1 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

Risk score

72.8

Published

2026-05-12

Status

Published

Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network.

Weaknesses

CWE-303

Coverage 1

threat-intel

Patch Tuesday, May 2026 Edition

This article reports on Patch Tuesday, May 2026, highlighting a significant increase in security vulnerabilities addressed by major software vendors like Microsoft, Apple, Google, Mozilla, and Oracle. The updates, spurre…

Krebs on Security · May 12, 2026 Critical

CVE-2026-41089CVE-2026-41096CVE-2026-41103USpatch tuesdayaivulnerability

All articles mentioning it

Advisories and references

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41103