CVE-2026-45480 is an improper authentication vulnerability (CWE-287) affecting Microsoft Azure Active Directory, a cloud service. The flaw allows unauthorized network attackers to elevate privileges, potentially compromising confidentiality, integrity, and availability of the service. The vulnerability has a CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), indicating it is exploitable remotely without authentication and results in complete system compromise. Microsoft has released an official fix for this issue, and as a cloud service, remediation is managed by Microsoft. No active exploitation has been reported.

Successful exploitation of this vulnerability allows attackers to bypass authentication controls and gain elevated privileges in Azure Active Directory. This can lead to full compromise of the service, impacting confidentiality, integrity, and availability of affected resources. Given the critical CVSS score and the nature of the vulnerability, the impact is severe.

Microsoft has issued an official fix for this vulnerability and manages remediation for Azure Active Directory as a cloud-hosted service. Customers should ensure their Azure Active Directory service is updated and that they follow any guidance provided by Microsoft Security Response Center. No additional action is required beyond applying the official fix.