High severity8.2NVD Advisory· Published Sep 18, 2026· Updated Sep 25, 2026
CVE-2026-83946
CVE-2026-83946
Description
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.
Affected products
2cpe:2.3:a:microsoft:azure_portal:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:azure_portal:-:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83946nvdVendor Advisory
News mentions
1- Microsoft: 24 Azure & AI Vulnerabilities Disclosed, Including Critical Privilege Escalation FlawsVypr Intelligence · Sep 18, 2026