CVE-2026-47280

CRITICAL WAF: Low
CVSS 9.8 Published: 2026-05-22
CWE-287

Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.

WAF Coverage Analysis

Improper Authentication Low WAF Coverage

OWASP: A07:2021 Identification and Authentication Failures

Affected Software

VendorProductVersion
microsoftazure_resource_manager-

References

Back to CVE Database