{"id":13948,"date":"2026-08-24T14:58:20","date_gmt":"2026-08-24T12:58:20","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?p=13948"},"modified":"2026-08-24T15:05:32","modified_gmt":"2026-08-24T13:05:32","slug":"microsoft-confirma-explotacion-activa-en-entra-id","status":"publish","type":"post","link":"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/","title":{"rendered":"Microsoft confirma explotaci\u00f3n activa en Entra ID"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"13948\" class=\"elementor elementor-13948\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-a5c438b elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"a5c438b\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ad31b0c\" data-id=\"ad31b0c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e1f322c elementor-widget elementor-widget-shortcode\" data-id=\"e1f322c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><span style=\"color: #c02b23;font-weight: bold\">Cr&iacute;tica <\/span><img loading=\"lazy\" decoding=\"async\" width=\"10\" height=\"10\" src=\"https:\/\/www.infordisa.com\/soc\/imgs\/alerta-5.png\" alt=\"Alerta 5\"\/><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8b00515 elementor-widget elementor-widget-text-editor\" data-id=\"8b00515\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div><strong><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-69836\" target=\"_blank\" rel=\"noopener\">CVE-2026-69836<\/a><\/strong><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8d20fc3 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"8d20fc3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-39b6441 elementor-toc--content-ellipsis elementor-toc--minimized-on-mobile elementor-widget elementor-widget-table-of-contents\" data-id=\"39b6441\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings='{\"headings_by_tags\":[\"h2\"],\"exclude_headings_by_selector\":[],\"marker_view\":\"bullets\",\"icon\":{\"value\":\"fas fa-chevron-right\",\"library\":\"fa-solid\"},\"no_headings_message\":\"No se ha encontrado ning\\u00fan encabezado en esta p\\u00e1gina.\",\"minimized_on\":\"mobile\",\"minimize_box\":\"yes\",\"hierarchical_view\":\"yes\",\"min_height\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"min_height_tablet\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"min_height_mobile\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]}}' data-widget_type=\"table-of-contents.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t\t\t\t<h4 class=\"elementor-toc__header-title\">\n\t\t\t\tTabla de contenidos\t\t\t<\/h4>\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--expand\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__39b6441\" aria-expanded=\"true\" aria-label=\"Abrir la tabla de contenidos\"><i aria-hidden=\"true\" class=\"fas fa-chevron-down\"><\/i><\/div>\n\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--collapse\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__39b6441\" aria-expanded=\"true\" aria-label=\"Cerrar la tabla de contenidos\"><i aria-hidden=\"true\" class=\"fas fa-chevron-up\"><\/i><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<div id=\"elementor-toc__39b6441\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<i class=\"elementor-toc__spinner eicon-animation-spin eicon-loading\" aria-hidden=\"true\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0697f3c elementor-widget elementor-widget-text-editor\" data-id=\"0697f3c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Microsoft ha alertado sobre una <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/vulnerabilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">vulnerabilidad<\/a> de severidad m&aacute;xima en Entra ID (antes Azure Active Directory) que permite la ejecuci&oacute;n remota de c&oacute;digo y que, seg&uacute;n la propia compa&ntilde;&iacute;a, ya ha sido explotada en entornos reales. El fallo, causado por la deserializaci&oacute;n de datos no confiables, alcanza la puntuaci&oacute;n m&aacute;xima de gravedad (CVSS 10.0). Microsoft ha confirmado que el problema ya ha sido mitigado por completo en el lado del servicio, por lo que no se requiere ninguna acci&oacute;n por parte de los clientes.<\/p><h2><strong>Detalles t&eacute;cnicos<\/strong><\/h2><table width=\"627\"><tbody><tr><td width=\"167\"><p><strong>Producto afectado<\/strong><\/p><\/td><td width=\"460\"><p>Microsoft Entra ID (anteriormente Azure Active Directory \/ Azure AD)<\/p><\/td><\/tr><tr><td width=\"167\"><p><strong>Identificador<\/strong><\/p><\/td><td width=\"460\"><p><a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/cve\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">CVE<\/a>-2026-69836<\/p><\/td><\/tr><tr><td width=\"167\"><p><strong>Puntuaci&oacute;n CVSS<\/strong><\/p><\/td><td width=\"460\"><p>10.0 (Cr&iacute;tica)<\/p><\/td><\/tr><tr><td width=\"167\"><p><strong>Tipo de fallo<\/strong><\/p><\/td><td width=\"460\"><p>CWE-502 &ndash; Deserializaci&oacute;n de datos no confiables<\/p><\/td><\/tr><tr><td width=\"167\"><p><strong>Impacto<\/strong><\/p><\/td><td width=\"460\"><p>Ejecuci&oacute;n remota de c&oacute;digo (RCE) por un atacante no autenticado, a trav&eacute;s de la red<\/p><\/td><\/tr><tr><td width=\"167\"><p><strong>Estado de explotaci&oacute;n<\/strong><\/p><\/td><td width=\"460\"><p>Explotada activamente en entornos reales (confirmado por Microsoft); no se han publicado detalles sobre el m&eacute;todo, la cronolog&iacute;a ni el alcance<\/p><\/td><\/tr><tr><td width=\"167\"><p><strong>Descubridor<\/strong><\/p><\/td><td width=\"460\"><p>Robert Fitzaptrick, ingeniero principal de seguridad<\/p><\/td><\/tr><tr><td width=\"167\"><p><strong>Mitigaci&oacute;n<\/strong><\/p><\/td><td width=\"460\"><p>Aplicada &iacute;ntegramente por Microsoft en el servicio en la nube. No se requiere acci&oacute;n por parte de los clientes<\/p><\/td><\/tr><\/tbody><\/table><p>Seg&uacute;n el aviso publicado por Microsoft, &ldquo;la deserializaci&oacute;n de datos no confiables en Microsoft Entra ID permite que un atacante no autorizado ejecute c&oacute;digo a trav&eacute;s de una red&rdquo;. Los fallos de tipo CWE-502 se producen cuando una aplicaci&oacute;n reconstruye un objeto o estructura de c&oacute;digo a partir de datos controlados por el usuario sin la validaci&oacute;n adecuada, lo que puede derivar en ejecuci&oacute;n de c&oacute;digo, <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/denegacion-de-servicio\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">denegaci&oacute;n de servicio<\/a> o elusi&oacute;n de controles de acceso.<\/p><h2><strong>Contexto relacionado<\/strong><\/h2><p>A principios de agosto, Microsoft tambi&eacute;n corrigi&oacute; un fallo de escalada de privilegios de severidad alta en el controlador Ancillary Function Driver para WinSock (CVE-2026-68820, CVSS 7.0), explotado como d&iacute;a cero por el grupo Lazarus, vinculado a Corea del Norte, dentro de la campa&ntilde;a de espionaje conocida como &ldquo;Operaci&oacute;n Dream Job&rdquo;.<\/p><h2><strong>Recomendaciones<\/strong><\/h2><p>Aunque Microsoft indica que no es necesaria ninguna acci&oacute;n por parte de los clientes, desde el SOC se recomienda, como buena pr&aacute;ctica:<\/p><ul><li>Revisar los registros de inicio de sesi&oacute;n y auditor&iacute;a de Entra ID (Sign-in logs \/ Audit logs) en busca de actividad an&oacute;mala reciente.<\/li><li>Confirmar que Microsoft Entra ID Protection y\/o Microsoft Defender for Identity est&aacute;n activos y correctamente configurados para detectar comportamientos an&oacute;malos asociados a esta vulnerabilidad.<\/li><li>Mantenerse atentos a futuras actualizaciones de Microsoft, ya que a d&iacute;a de hoy no se han publicado indicadores de compromiso (IOC) ni detalles sobre el m&eacute;todo de explotaci&oacute;n.<\/li><li>Verificar el estado de parcheo de CVE-2026-68820 (AFD para WinSock) en los sistemas Windows, dada su explotaci&oacute;n activa por parte del grupo Lazarus.<\/li><li>Reforzar la <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/autenticacion\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">autenticaci&oacute;n<\/a> multifactor (<a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/mfa\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">MFA<\/a>) y la pol&iacute;tica de acceso condicional en Entra ID como medida de defensa en profundidad.<\/li><\/ul><p>Fuente: <a href=\"https:\/\/thehackernews.com\/2026\/08\/microsoft-entra-id-flaw-cvss-100.html\" target=\"_blank\" rel=\"noopener\">The Hacker News<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Vulnerabilidad de severidad m&aacute;xima en Entra ID (antes Azure Active Directory) que pemite la ejecuci&oacute;n remota de c&oacute;digo.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[4],"tags":[227,62,147],"class_list":["post-13948","post","type-post","status-publish","format-standard","hentry","category-alertas-de-seguridad","tag-entra-id","tag-microsoft","tag-vulnerabilidad","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-25"],"acf":[],"yoast_head":"<title>Microsoft confirma explotaci\u00f3n activa en Entra ID - INFORDISA \/ Security Operations Center<\/title>\n<meta name=\"description\" content=\"Vulnerabilidad de severidad m\u00e1xima en Entra ID (antes Azure Active Directory) que pemite la ejecuci\u00f3n remota de c\u00f3digo.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft confirma explotaci\u00f3n activa en Entra ID - INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"Vulnerabilidad de severidad m\u00e1xima en Entra ID (antes Azure Active Directory) que pemite la ejecuci\u00f3n remota de c\u00f3digo.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/\" \/>\n<meta property=\"og:site_name\" content=\"INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-24T12:58:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-24T13:05:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/alerta-entra-id.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jordi Sala\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/alerta-entra-id.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@infordisa\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordi Sala\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/microsoft-confirma-explotacion-activa-en-entra-id\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/microsoft-confirma-explotacion-activa-en-entra-id\\\/\"},\"author\":{\"name\":\"Jordi Sala\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\"},\"headline\":\"Microsoft confirma explotaci\u00f3n activa en Entra ID\",\"datePublished\":\"2026-08-24T12:58:20+00:00\",\"dateModified\":\"2026-08-24T13:05:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/microsoft-confirma-explotacion-activa-en-entra-id\\\/\"},\"wordCount\":523,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"keywords\":[\"Entra ID\",\"Microsoft\",\"Vulnerabilidad\"],\"articleSection\":[\"Alertas de seguridad\"],\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/microsoft-confirma-explotacion-activa-en-entra-id\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/microsoft-confirma-explotacion-activa-en-entra-id\\\/\",\"name\":\"Microsoft confirma explotaci\u00f3n activa en Entra ID - INFORDISA \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"datePublished\":\"2026-08-24T12:58:20+00:00\",\"dateModified\":\"2026-08-24T13:05:32+00:00\",\"description\":\"Vulnerabilidad de severidad m\u00e1xima en Entra ID (antes Azure Active Directory) que pemite la ejecuci\u00f3n remota de c\u00f3digo.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/microsoft-confirma-explotacion-activa-en-entra-id\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/microsoft-confirma-explotacion-activa-en-entra-id\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/microsoft-confirma-explotacion-activa-en-entra-id\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft confirma explotaci\u00f3n activa en Entra ID\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"alternateName\":\"INFORDISA\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"INFORDISA \\\/ SOC\",\"alternateName\":\"INFORDISA\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"INFORDISA \\\/ SOC\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\",\"name\":\"Jordi Sala\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"caption\":\"Jordi Sala\"},\"description\":\"Marketing\",\"sameAs\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"]}]}<\/script>","yoast_head_json":{"title":"Microsoft confirma explotaci\u00f3n activa en Entra ID - INFORDISA \/ Security Operations Center","description":"Vulnerabilidad de severidad m\u00e1xima en Entra ID (antes Azure Active Directory) que pemite la ejecuci\u00f3n remota de c\u00f3digo.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/","og_locale":"es_ES","og_type":"article","og_title":"Microsoft confirma explotaci\u00f3n activa en Entra ID - INFORDISA \/ Security Operations Center","og_description":"Vulnerabilidad de severidad m\u00e1xima en Entra ID (antes Azure Active Directory) que pemite la ejecuci\u00f3n remota de c\u00f3digo.","og_url":"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/","og_site_name":"INFORDISA \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_published_time":"2026-08-24T12:58:20+00:00","article_modified_time":"2026-08-24T13:05:32+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/alerta-entra-id.jpg","type":"image\/jpeg"}],"author":"Jordi Sala","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/alerta-entra-id.jpg","twitter_creator":"@infordisa","twitter_site":"@infordisa","twitter_misc":{"Escrito por":"Jordi Sala","Tiempo de lectura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/#article","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/"},"author":{"name":"Jordi Sala","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375"},"headline":"Microsoft confirma explotaci\u00f3n activa en Entra ID","datePublished":"2026-08-24T12:58:20+00:00","dateModified":"2026-08-24T13:05:32+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/"},"wordCount":523,"publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"keywords":["Entra ID","Microsoft","Vulnerabilidad"],"articleSection":["Alertas de seguridad"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/","url":"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/","name":"Microsoft confirma explotaci\u00f3n activa en Entra ID - INFORDISA \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"datePublished":"2026-08-24T12:58:20+00:00","dateModified":"2026-08-24T13:05:32+00:00","description":"Vulnerabilidad de severidad m\u00e1xima en Entra ID (antes Azure Active Directory) que pemite la ejecuci\u00f3n remota de c\u00f3digo.","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/microsoft-confirma-explotacion-activa-en-entra-id\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"Microsoft confirma explotaci\u00f3n activa en Entra ID"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"INFORDISA \/ Security Operations Center","description":"Portal de Ciberseguridad","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"alternateName":"INFORDISA","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"INFORDISA \/ SOC","alternateName":"INFORDISA","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"INFORDISA \/ SOC"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]},{"@type":"Person","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375","name":"Jordi Sala","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","caption":"Jordi Sala"},"description":"Marketing","sameAs":["https:\/\/www.infordisa.com\/soc\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/13948","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/comments?post=13948"}],"version-history":[{"count":7,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/13948\/revisions"}],"predecessor-version":[{"id":13958,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/13948\/revisions\/13958"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/media?parent=13948"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/categories?post=13948"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/tags?post=13948"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}