CVE-2026-62830: Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

Details

Source

NVD Recent CVEs (US · database · site)

Severity

critical — CVSS 9.9

Published

2026-08-07

Last updated

2026-08-07

Exploitation

Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-62830

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• criticalCVE-2026-62830: Azure SRE Agent Elevation of Privilege Vulnerabilitymsrc

Recent advisories for Missing authorization in

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• criticalCVE-2026-65667: Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges…nvd · 2026-08-07
• highCVE-2026-67621: Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated…nvd · 2026-08-06
• mediumGHSA-rvmm-v933-jgxq: Craft CMS: Missing authorization check allows non-admin control panel users access to use…ghsa · 2026-08-06
• mediumGHSA-9p7c-v5x3-rfx8: Craft CMS: Missing authorization check allows non-admin control panel users to reorder Gl…ghsa · 2026-08-06
• mediumGHSA-qh8c-7588-qfrv: Statamic: Missing authorization on navigation endpoint allows disclosure of restricted en…ghsa · 2026-08-06
• mediumGHSA-225x-3jhx-wh4q: Statamic: Missing authorization on Control Panel endpoint allows disclosure of user exist…ghsa · 2026-08-06

More from NVD Recent CVEs

• criticalCVE-2026-70332: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attac…2026-08-07
• criticalCVE-2026-68823: Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacke…2026-08-07
• highCVE-2026-65668: Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to eleva…2026-08-07
• criticalCVE-2026-65667: Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges…2026-08-07
• criticalCVE-2026-63508: Missing authentication for critical function in Microsoft Planetary Computer Pro allows an una…2026-08-07