CVE-2026-72978

Active Directory Federation Services (AD FS) is vulnerable due to the allocation of resources without proper limits or throttling, which can be exploited by unauthorized attackers to launch denial-of-service (DoS) attacks over the network. Organizations utilizing AD FS should prioritize this vulnerability to mitigate potential service disruptions and ensure the availability of their authentication services.