8.4
High
CVE-2026-41098 Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an…
Description
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to perform spoofing over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure Stack Edge 2.2 | 2.2.0 → < 3.3.2604.3097 | 3.3.2604.3097 |
Other CVEs of Azure Stack Edge
The 4 CVEs of Azure Stack Edge →
CVE-2026-47643
External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network
9.8
Critical
CVE-2023-21703
Azure Data Box Gateway Remote Code Execution Vulnerability
6.5
Medium
CVE-2022-37968
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters
10.0
Critical