Skip to content
fr Sign in
8.8 High

CVE-2026-47632 Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges…

Description

Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.

Affected products and versions

Product Affected versions Fixed in
Azure Monitor Agent Metrics Extension 1.0 1.0.0 → < 1.65 1.65
Azure Connected Machine Agent 1.0 1.0.0 → < 1.65 1.65

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Azure Monitor Agent Metrics Extension

The 2 CVEs of Azure Monitor Agent Metrics Extension →
CVE-2026-42830 Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally 6.5 Medium
Track this CVE