CVE-2026-83946

HighCVSS 8.2

Published: 18/09/2026(UTC)Updated: 25/09/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Summary

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.

Risk Assessment

The risk includes the possibility of spoofing portal content, potentially leading to fraud or theft of user credentials.

Recommendation

Apply vendor patches and implement input filtering and encoding mechanisms in Azure Portal.

Other vulnerabilities in Azure Portal

CVE-2026-62835Critical
Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.

Original NVD description (English source)

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS