← All advisories

Critical severity9.9NVD Advisory· Published Sep 17, 2026· Updated Oct 31, 2026

CVE-2026-69399

CVE-2026-69399

Description

Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network.

Affected products

2

Microsoft/Azure Arc2 versions
cpe:2.3:a:microsoft:azure_arc:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:azure_arc:-:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69399nvdVendor Advisory

News mentions

1

Microsoft: 24 Azure & AI Vulnerabilities Disclosed, Including Critical Privilege Escalation Flaws
Vypr Intelligence · Sep 18, 2026