Microsoft Authenticator flaw let any Android app grab work tokens
CVE-2026-80097: a permissionless Android app could impersonate Teams to Microsoft Authenticator and get work-account tokens. Fixed in Authenticator 6.2606.4246.
CVE-2026-80097: a permissionless Android app could impersonate Teams to Microsoft Authenticator and get work-account tokens. Fixed in Authenticator 6.2606.4246.