CVE-2026-40412

Microsoft · Published May 21, 2026

10.0

CVSS v3.1

CRITICAL

Patch availableGet patch

Description

Azure Orbital Spatio Remote Code Execution Vulnerability. Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.

Affected Products

Azure Orbital Spatio

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C