A vulnerability classified as critical has been found in Microsoft Global Secure Access . Affected is an unknown function. This manipulation causes improper privilege management. This vulnerability is tracked as CVE-2026-23663 . The attack is possible to be carried out remotely. No exploit exists. This product is a managed service. This means that users cannot maintain vulnerability countermeasures themselves.