CVE Catalog
CVE-2026-40411
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk0.53%
41th percentile - higher than 41% of all known CVEs
Summary
Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code remotely over the network.
Risk Assessment
An authorized attacker could take over the virtual network gateway, potentially compromising network traffic security and access to cloud resources.
Recommendation
Apply the latest security updates from Microsoft. Restrict access to virtual network gateways to trusted users only.
Original NVD description (English source)
Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.