CVE-2026-69558
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.
Risk Assessment
An unauthorized attacker can exploit this vulnerability to access data they should not have access to, leading to confidentiality breach.
Recommendation
Apply patches from Microsoft for Partner Center and review authorization mechanisms based on keys.
Other vulnerabilities in Microsoft Partner Center
See all- CVE-2026-34327High
A vulnerability in Microsoft Partner Center allows externally controlled references to a resource in another sphere, enabling an unauthorized attacker to perform spoofing over a network.
- CVE-2025-65041Critical
Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.