CVE-2026-58630

Microsoft · Published July 23, 2026

10.0

CVSS v3.1

CRITICAL

Patch availableGet patch

Description

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability. Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.

Affected Products

Azure App Service for Linux

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C