CVE-2026-84003
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.
- Published Sep 8, 2026
- CVSS 7.4 high
- 0.6% chance of exploitation in the next 30 days (EPSS)