Cloudanix VulnDB

CVE-2026-26148

High · 8.1

CVSS

8.1

EPSS

0.3%

Published

Mar 10, 2026

CISA due date

—

The record

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities