CVE-2026-41098

HighCVSS 8.4

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.81%

53th percentile - higher than 53% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability in Azure Stack Edge allows an authorized attacker to perform spoofing over a network.

Risk Assessment

An attacker can inject malicious scripts executed in other users' browsers, potentially leading to session theft or impersonation.

Recommendation

Install the latest security updates for Azure Stack Edge from Microsoft.

Other vulnerabilities in Azure Stack Edge

CVE-2026-47643Critical
Azure Stack Edge has a vulnerability involving external control of file name or path, allowing an unauthorized attacker to execute code over a network.

Original NVD description (English source)

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to perform spoofing over a network.