Authorization Bypass Vulnerability in Microsoft Partner Center
CVE-2026-69558

8.6HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Partner Center
Vendor
CVE Published:
20 August 2026

What is CVE-2026-69558?

An authorization bypass vulnerability exists in Microsoft Partner Center that allows an unauthorized attacker to gain access to sensitive information by exploiting a user-controlled key. This flaw enables the attacker to disclose confidential data over a network, potentially impacting the integrity and security of user information. It is essential for users and administrators to be aware of this vulnerability and ensure they implement recommended security measures.

Affected Version(s)

Microsoft Partner Center -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.