fr Sign in

10.0 Critical

CVE-2026-47280 Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a…

Description

Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure Resource Manager	Versions not published

References

Azure Resource Manager Elevation of Privilege Vulnerability msrc.microsoft.com

Timeline

Published May 22, 2026
Last modified August 10, 2026

The 3 CVEs of Azure Resource Manager →

CVE-2026-42822 Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges… 10.0 Critical CVE-2026-24304 Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network 9.9 Critical

Track this CVE