High MSRC-CVE-2026-109460 1 CVE

Microsoft Entra Private Network Connector Information Disclosure Vulnerability

Published Nov 10, 2026 · Updated Nov 10, 2026

Vendor: Microsoft

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
Exploiting this vulnerability could allow the disclosure of credentials.

Security updates
1.5.5130.0 — https://learn.microsoft.com/en-us/entra/global-secure-access/reference-version-history#version-1551300

Vulnerabilities 1

Medium 5.5

CVE-2026-109460

Microsoft Entra Private Network Connector Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Entra Private Network Connector allows an authorized attacker to disclose information locally.

Microsoft Microsoft Entra Private Network Connector

Nov 10, 2026

Revision history

2026-11-10 #1
Information published.

References

CVE-2026-109460 Microsoft Entra Private Network Connector Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109460
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss