CVE-2026-62830

Microsoft · Published August 6, 2026

9.9

CVSS v3.1

CRITICAL

Patch availableGet patch

Description

Azure SRE Agent Elevation of Privilege Vulnerability. Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

Affected Products

Azure SRE Agent

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C