Researchers at Enclave discovered a vulnerability in Microsoft Authenticator on Android that allowed any app on the device to steal work account access without user interaction.
The vulnerability or weakness
The vulnerability stemmed from a lack of proper authentication checks in Authenticator, which failed to verify the identity of requesting apps.
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2026-80097 | 8.6 | HIGH | No | - |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Organizations could face severe operational disruptions as attackers gained unauthorized access to sensitive data and communications, potentially leading to financial losses and legal repercussions.
Industries affected
All industries using Microsoft Authenticator for work accounts are affected, including finance, healthcare, and technology.
Users affected
Users of Microsoft Authenticator on Android should update to the latest version to protect their work accounts from unauthorized access.
