EUVD-2026-63621
GHSA-mxqx-57v7-6jqc
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Network-reachable unauthenticated auth-bypass/EoP in a multi-tenant cloud control plane justifies AV:N/AC:L/PR:N/UI:N with scope change and full CIA impact.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
2DescriptionCVE.org
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
AnalysisAI
Privilege elevation in Microsoft Azure Arc allows a remote, unauthenticated attacker to gain elevated privileges over a network by exploiting an incorrectly-resolved name or reference (CWE-706), rated the maximum CVSS 10.0 with a scope change. Reported by Microsoft with a fix available through the MSRC update guide; there is no public exploit identified at time of analysis and the issue is not listed in CISA KEV. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Per the CVSS vector (AV:N/AC:L/PR:N/UI:N), no special conditions are required beyond network reachability of the affected Azure service endpoint - remote, unauthenticated exploitation with low complexity and no user interaction. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This carries the maximum CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H): network-reachable, low complexity, no privileges, no user interaction, scope change, and full confidentiality/integrity/availability impact - the profile of a critical, trivially triggerable, unauthenticated privilege escalation in a cloud control plane, which any operator should treat as urgent. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Patch available per vendor advisory - review the Microsoft MSRC update guide entry at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65816 for the definitive remediation. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all Azure Arc deployments in your environment and assess exposure to untrusted networks; isolate critical instances if immediate patching is not feasible. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Azure Web Apps
View allAn authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges ov
Unauthenticated information disclosure in Azure MCP Server allows remote attackers to access sensitive data over the net
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today