Information Disclosure Vulnerability in Azure Portal by Microsoft
CVE-2026-62835

9.3CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure Portal
Vendor
CVE Published:
24 July 2026

What is CVE-2026-62835?

The Azure Portal has a vulnerability that could allow unauthorized attackers to disclose sensitive information over a network due to improper authorization mechanisms. This issue raises significant cybersecurity concerns as it can potentially expose critical user data to malicious actors if not addressed promptly.

Affected Version(s)

Azure Portal -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.