CVE-2026-69555
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An unauthorized attacker can elevate privileges, potentially leading to unauthorized access to resources and system compromise.
Recommendation
Apply patches from Microsoft for Azure Arc and review permission configurations.
Other vulnerabilities in Azure Arc
See all- CVE-2026-70009Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69399Critical
Elevation of Privilege vulnerability in Azure Arc. Technical details were not provided in the description.
- CVE-2026-65816Critical
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-62895High
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS