CVE-2026-41103
Critical
Published: 12 May 2026
Published
12 May 2026
Modified
12 May 2026
KEV Added
—
Patch
—
CVSS Score
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
N/A
Risk Priority
18
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2026-41103 is a critical-severity Incorrect Implementation of Authentication Algorithm (CWE-303) vulnerability. Its CVSS base score is 9.1 (Critical).
Operationally, it is not currently listed in the CISA KEV catalog.
NVD Description
Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network.
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)