CVE-2026-34327
HighSummary
A vulnerability in Microsoft Partner Center allows externally controlled references to a resource in another sphere, enabling an unauthorized attacker to perform spoofing over a network.
Risk Assessment
An attacker could impersonate other resources, potentially leading to data leakage or system integrity breaches.
Recommendation
It is recommended to monitor and secure resource references and implement appropriate authentication mechanisms.
Other vulnerabilities in Microsoft Partner Center
See all- CVE-2025-65041Critical
Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69558High
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.