CVE-2026-58630
An Azure App Service vulnerability allows an attacker to gain elevated privileges over a network without authentication. The flaw is due to improper access control, enabling unauthorized users to access sensitive resources. It is a critical security issue that could compromise confidential data and system integrity.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Microsoft Azure App Service (all versions, as no specific version is listed).
Real-world impact
An attacker who can exploit this flaw can elevate their privileges on the network, potentially accessing or modifying confidential data and services that should be restricted.
Why this severity
The CVSS score of 10 reflects that the vulnerability can be exploited remotely (network access), requires no user interaction, and does not need any privileges to start. It also changes the scope of the affected system, leading to high confidentiality and integrity impact, while availability is not affected.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources