CVE-2026-47280

Severity

CRITICAL

CVSS

10.0

EPSS

0.00494

Risk score

40.17

CISA KEV

PoC

Published

2026-05-22

Modified

2026-08-10

First seen

2026-08-05

Aliases

EUVD-2026-31514, GHSA-Q9GJ-2HH6-3882

Products

Microsoft:Azure Resource Manager -, microsoft:azure_resource_manager

Sources

Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.