CVE-2026-65816
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVSS score10.0 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeakness type (CWE)CWE-706
Vendorsmicrosoft
Affected products
| Vendors | Product | Versions |
|---|---|---|
| microsoft | azure web apps | - |
Related articles
Microsoft patches 22 flaws: Entra ID already secured, but ShieldBreak remains unpatched
Microsoft updates 22 security flaws: Entra ID fixed, but ShieldBreak zero-day in Defender still unpatched. Cloud vulnerabilities mostly server-mitigated.
CVE-2026-69836: Critical Vulnerability Exploited in Microsoft Entra ID, but Customers Need Take No Action
Microsoft fixes critical CVE-2026-69836 in Entra ID, fully mitigated. No patches needed. Exploited in attacks but resolved.
This product uses the NVD API but is not endorsed or certified by the NVD.