CVE-2026-47643 External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network

Description

External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure Stack Edge 2.2	2.2.0 → < 3.3.2604.3097	3.3.2604.3097

Other CVEs of Azure Stack Edge

The 4 CVEs of Azure Stack Edge →

CVE-2026-41098 Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an… 8.4 High CVE-2023-21703 Azure Data Box Gateway Remote Code Execution Vulnerability 6.5 Medium CVE-2022-37968 Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters 10.0 Critical