What is the CVSS score of EUVD-2026-18561?

EUVD-2026-18561 has a CVSS 3.1 base score of 10.0 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

How to fix or mitigate EUVD-2026-18561?

Within 24 hours: Identify and inventory all Azure AI Foundry instances in production and development environments; implement network segmentation to restrict access to AI Foundry endpoints to trusted internal networks only; enable enhanced logging and monitoring for all authentication attempts and privilege escalation events. Within 7 days: Conduct forensic review of access logs dating back 30 days for signs of exploitation; revoke and rotate all API keys, service principals, and credentials with access to AI Foundry; brief executive stakeholders on remediation timeline and business continuity risks. Within 30 days: Deploy compensating controls (see below); establish daily coordination with Microsoft for patch status updates; prepare rollout procedures for patching immediately upon vendor release.

Microsoft EUVD-2026-18561

Q: Which versions of Microsoft are affected by EUVD-2026-18561?

Azure AI Foundry contains a critical authorization flaw (CVSS 10.0) allowing unauthenticated remote attackers to escalate privileges and achieve complete system compromise, affecting confidentiality,…. A patch is available.

| CVE-2026-32213 CRITICAL

Improper Authorization (CWE-285)

2026-04-03 secure@microsoft.com

GHSA-ccr7-c63m-8vgm

Microsoft Authentication Bypass

10.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Apr 03, 2026 - 00:22 euvd

EUVD-2026-18561

Analysis Generated

Apr 03, 2026 - 00:22 vuln.today

CVE Published

Apr 03, 2026 - 00:16 nvd

CRITICAL 10.0

DescriptionCVE.org

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

AnalysisAI

Azure AI Foundry improper authorization permits unauthenticated remote attackers to escalate privileges and achieve complete compromise with high impact to confidentiality, integrity, and availability. The CVSS 10.0 rating reflects network-based attack vector with low complexity, no user interaction, and scope change indicating containerization/isolation escape. EPSS and KEV status not provided, but the authentication bypass affecting a cloud AI platform poses severe risk. No public exploit identified at time of analysis.

Technical ContextAI

This vulnerability stems from CWE-285 (Improper Authorization), indicating flawed access control enforcement in Azure AI Foundry's permission model. Azure AI Foundry is Microsoft's platform for building, deploying, and managing AI applications and models. The authorization defect allows attackers to bypass authentication gates entirely, gaining unauthorized access to privileged operations. The Changed scope (S:C) in the CVSS vector suggests the vulnerability may enable escape from logical boundaries such as tenant isolation or container boundaries within the multi-tenant cloud environment, allowing impact beyond the vulnerable component itself. This class of authorization flaw typically arises from missing or incorrect permission checks in API endpoints, middleware layers, or role-based access control (RBAC) implementations.

RemediationAI

Apply security updates immediately per Microsoft Security Response Center guidance at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32213. Exact patched version numbers were not provided in available intelligence; consult the vendor advisory for deployment-specific update procedures. Given the cloud-managed nature of Azure AI Foundry, Microsoft may deploy server-side fixes automatically, but customers should verify patch application status through Azure portal or service health dashboard. Until confirmation of remediation, implement compensating controls: restrict network access to Azure AI Foundry endpoints using firewall rules or virtual network service endpoints, enable enhanced logging and monitoring for unauthorized privilege escalation attempts, review and audit existing user permissions and API access tokens, and consider temporarily suspending non-critical AI workloads if business continuity allows.