7.0
Élevée
CVE-2025-26627 Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized…
Description
Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Azure ARC 1.0 | 1.0.0 → < 1.0.10 | 1.0.10 |
Références
- Azure Arc Installer Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Azure ARC
Les 6 CVE de Azure ARC →
CVE-2026-69399
Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network
9.9
Critique
CVE-2026-70009
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized…
9.3
Critique
CVE-2026-69555
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network
10.0
Critique
CVE-2026-24302
Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network
8.6
Élevée