CVE-2026-47632
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
Risk Assessment
An attacker on an adjacent network could exploit this vulnerability to escalate privileges, potentially leading to unauthorized access to systems and data.
Recommendation
Update the Azure Connected Machine Agent to the latest version that includes security fixes.
Other vulnerabilities in Azure Connected Machine Agent
See all- CVE-2026-40381High
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-21224High
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
- CVE-2024-21329High
Vulnerability in Azure Connected Machine Agent allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Original NVD description (English source)
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.