Security1 hOctober 27, 2026, 12:30

Microsoft patches severe Authenticator for Android flaw

Microsoft fixed CVE-2026-80097 (CVSS 8.6) in its Authenticator app for Android. The flaw let untrusted apps impersonate Microsoft apps and obtain delegated account tokens.

Techmeme

Open source

Microsoft patches severe Authenticator for Android flaw

CVE-2026-80097 carries a CVSS score of 8.6
The flaw let malicious apps obtain delegated account tokens
Microsoft has released a patch for Authenticator on Android

#Microsoft#Android#Authenticator

HPE patches critical iLO 7 authentication flaw

Security

HPE patches 72 ArubaOS flaws, including eight max-severity RCE and auth bypass bugs

Security

SAP patches 20 flaws, including max-severity OAuth2 SSRF in Cloud SDK for Python

Security

Microsoft patches severe Authenticator for Android flaw

HPE patches critical iLO 7 authentication flaw

HPE patches 72 ArubaOS flaws, including eight max-severity RCE and auth bypass bugs

SAP patches 20 flaws, including max-severity OAuth2 SSRF in Cloud SDK for Python

Microsoft and others ship emergency patches for critical Brotli flaw in Node.js