Improper Access Control in Azure App Service Affects Microsoft
CVE-2026-58630

10CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure App Service For Linux
Vendor
CVE Published:
24 July 2026

What is CVE-2026-58630?

The Azure App Service on Azure Stack Hub is susceptible to a vulnerability that permits unauthorized individuals to escalate their privileges across a network. This flaw arises from improper access control measures implemented within the service, creating opportunities for attackers to gain elevated permissions and potentially compromise sensitive systems and data.

Affected Version(s)

Azure App Service for Linux -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.