← Back

CVE-2026-26148

nvd nist
Published: Mar 10, 2026Modified: Jun 17, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability: 1.4 / Impact: 6.0
Source: secure@microsoft.com (Secondary)

Description

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.

Affected (1)

Microsoft
1 product
Azure Ad Ssh Login Extension For Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Azure Ad Ssh Login Extension For Linux
From 1.0.0 to 1.0.033370002

Related CWEs

CWE-454
External Initialization of Trusted Variables or Data Stores
The product initializes critical internal variables or data stores using inputs that can be modified by untrusted actors.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.