CVE Catalog
CVE-2026-62830
CriticalCVSS 9.9Summary
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An authorized attacker can gain elevated privileges, potentially leading to unauthorized access to Azure resources and compromise of infrastructure security.
Recommendation
Apply security updates provided by Microsoft for Azure SRE Agent and restrict user permissions to the minimum required.
Original NVD description (English source)
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.