THREAT OPS › Threat News › [NVD] CVE-2026-15630 (CRITICAL 9.9) — A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization (based on ?id=) and action (based on request body).
[NVD] CVE-2026-15630 (CRITICAL 9.9) — A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization (based on ?id=) and action (based on request body).
CVE-2026-15630 CVSS: 9.9 CRITICAL Published: 2026-07-23T21:17:02.760
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization (based on ?id=) and action (based on request body).
Indicators of compromise
- CVE-2026-15630cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-15630