CVE-2026-24304

Severity

CRITICAL

CVSS

9.9

EPSS

0.00609

Risk score

39.81

CISA KEV

No

PoC

No

Published

2026-01-23

Modified

2026-07-30

First seen

2026-08-05

Aliases

EUVD-2026-4493, GHSA-2CWP-H6W6-7HMQ

Products

Microsoft:Azure Resource Manager -, microsoft:azure_resource_manager

Sources

Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.