CVE-2026-50684

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services (affected versions not specified)

Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network. Cross-site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.