EUVD-2026-82596
GHSA-rxm5-mf39-7v3r
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Description states unauthenticated network privilege elevation (AV:N/AC:L/PR:N/UI:N); crossing a trust boundary via spoofed data justifies S:C, with high C/I and low A consistent with the vendor vector.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network.
AnalysisAI
Privilege elevation in Microsoft's Azure Billing service allows unauthenticated remote attackers to cross a trust boundary by supplying data the service fails to authenticate, yielding high confidentiality and integrity impact. The vendor assigns the maximum CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L), meaning the flaw is network-reachable, low-complexity, and requires no authentication, UI interaction, or prior privileges; the scope change reflects forged data being accepted across a trust boundary to escalate privileges. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions per the CVSS vector - remote unauthenticated exploitation over the network (AV:N/AC:L/PR:N/UI:N) against Azure Billing, involving a scope change (S:C) where forged data crosses a trust boundary to elevate privileges. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor assigns the maximum CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L), reflecting an unauthenticated, low-complexity, network-reachable privilege-elevation flaw with a scope change and high confidentiality/integrity impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No customer-installable patch exists for this issue because Azure Billing is a Microsoft-operated service; remediation is performed entirely on Microsoft's side, and no fixed version number is provided in the supplied data, so no version claim should be made. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm whether your organization uses Microsoft Azure Billing, review Microsoft's advisory and service health notifications for CVE-2026-62874, and validate that no unauthorized privilege or billing changes have occurred; because no vendor-released patch is identified at time of analysis and this is a Microsoft-operated service, do not attempt customer-side patching. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Path traversal in pnpm's tarball extraction on Windows allows attackers to write files outside the intended package dire
Path traversal (CWE-22) in Azure Logic Apps allows an unauthenticated, network-reachable attacker to escape the intended
Unauthenticated remote privilege escalation in Microsoft's Azure AI Foundry cloud service: a critical function is expose
Improper access control in Microsoft's Azure Logic Apps cloud service allows an unauthenticated, remote attacker to elev
Default password in Himmelblau Azure Entra ID suite 3.0.0-3.0.x. CVSS 10.0.
Privilege escalation in Azure Database for PostgreSQL allows an authenticated attacker with low privileges to elevate pr
Default credentials in Cisco ISE cloud deployments on AWS/Azure/OCI. CVSS 9.9.
Deserialization of untrusted data in Azure SDK allows unauthorized code execution over a network. EPSS 0.32%.
Elevation of privilege vulnerability in Azure Front Door allows attackers to gain elevated access. Microsoft Azure cloud
Azure Front Door has an improper access control vulnerability (CVSS 9.8) allowing unauthorized attackers to elevate priv
Azure AD auth bypass in Devolutions Server 2025.3.15.0 and earlier.
Fleet device management software has a signature verification bypass that allows attackers to install malicious firmware
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today