Spoofing Vulnerability in Azure Event Grid by Microsoft
CVE-2026-83947

7.7HIGH

Key Information:

Vendor

Microsoft
Status
Azure Event Grid System
Vendor
CVE Published:
8 October 2026

What is CVE-2026-83947?

A vulnerability in Azure Event Grid enables unauthorized attackers to exploit missing authorization mechanisms, allowing them to conduct spoofing attacks on the network. This could lead to unauthorized access and manipulation of events within Azure services, posing risks to data integrity and organizational security.

Affected Version(s)

Azure Event Grid System -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.