Skip to content

Known vulnerabilities in Microsoft Azure ARC

Is your version affected?

CVE Summary Score Published
CVE-2026-69399 Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network 9.9 Critical Sep 17, 2026
CVE-2026-70009 Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized… 9.3 Critical Sep 17, 2026
CVE-2026-69555 Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network 10.0 Critical Aug 20, 2026

Other Microsoft products