cve 2026 50324

The cve 2026 50324 tag covers reporting on a vulnerability in Microsoft Active Directory Federation Services (AD FS). The flaw is an unauthenticated, network-based denial-of-service issue caused by an infinite-loop condition. A remote attacker could trigger the loop without signing in, consume the service’s ability to process legitimate work, disrupt federation, and potentially prevent users from accessing dependent applications. Microsoft addressed the issue in its July 14, 2026 security updates and rated it Important. Coverage also notes a CVSS 3.1 base score of 5.9 and references tracking by the Microsoft Security Response Center and National Vulnerability Database.