Microsoft’s October 2026 Patch Tuesday shipped fifteen CVEs affecting Active Directory Federation Services. Two arrived as direct spoofing vulnerabilities: CVE-2026-108131 (CVSS 7.5, Important, token forgery) and CVE-2026-96222 (CVSS 7.4, Important, bypass). They arrive the same week that Post 131823 documented DKM ACL enforcement activation — the mechanism Microsoft designed to close the trust-boundary surface these CVEs are now reopening.
The timing compounds what we already documented in the Golden SAML analysis (Post 131832). AD FS is the federated identity layer enterprises use to bridge on-premises identity into cloud services. When that layer is spoofable, every federated session inherits the weakness. CVE-2026-108131 enables token forgery. CVE-2026-96222 enables bypass. Neither requires privileged access to exploit. Both affect the trust boundary that DKM enforcement was meant to harden.
The full Patch Tuesday haul for AD FS totals fifteen CVEs across authentication, authorization, and configuration layers. The severity distribution includes one issue rated Critical at CVSS 9.1 (CVE-2026-96252, classification tension between elevation-of-privilege and information-disclosure) alongside the two spoofing entries. Microsoft assessed no exploitation at the time of disclosure. No public proof-of-concept has been confirmed. No KEV listing has been published.
The DKM enforcement activation documented in Post 131823 enforced access controls on the Distributed Key Manager — the cryptographic mechanism that protects AD FS token-signing certificates. The premise was that tighter DKM ACLs would constrain the attack surface for exactly the kind of token forgery these CVEs describe. Two new spoofing CVEs in the same week as enforcement activation suggest the attack surface is not closing as fast as the enforcement layer is deploying.
This is the trust-through-defaults pattern arriving at the federated identity layer. SAML and OAuth depend on the assumption that assertion signatures and issuer identifiers are validated before session establishment. When the validation layer is missing or insufficient, every downstream trust decision inherits the gap. The Golden SAML technique exploits exactly this: forging SAML assertions that downstream systems accept as legitimate because the trust boundary was never properly enforced. CVE-2026-108131’s token forgery and CVE-2026-96222’s bypass are variations on the same structural weakness.
For enterprises running AD FS as their federated identity bridge, the operational reality is layered: Patch Tuesday delivers the fix, DKM enforcement activates the hardening, and two new CVEs reopen the surface the enforcement was designed to close. The remediation path requires both patching and verifying that DKM ACL enforcement is active on every AD FS node. Configuration checks alone are insufficient — the advisory notes that the vulnerabilities affect the authentication and authorization layers independently of DKM state.
The trust-through-defaults pattern across the identity stack is producing new surface area faster than the enforcement layer can close it. That is the structural observation Post 131823 anticipated. This Patch Tuesday confirms it.