SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-69435

CriticalCVSS 9.6
Published: Translated: NVD NIST

Summary

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

Risk Assessment

An attacker with valid credentials could escalate privileges, gaining access to resources and operations beyond their intended role.

Recommendation

Apply updates for Azure SRE Agent and review and restrict permissions assigned to accounts in the environment.

Other vulnerabilities in Azure SRE Agent

See all
Original NVD description (English source)

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS