CVE-2026-118742: Azure Front Door Elevation of Privilege Vulnerability

Published Nov 10, 2026

Updated

Azure Front Door Elevation of Privilege Vulnerability

Other sources

Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

— Microsoft

Affected Software

1 affected component

Microsoft Azure Front Door

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·06:20 PM

Data Sourced

via MITRE·06:20 PM

DescriptionSeverity

Data Sourced

via NVD·07:19 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue is described as exploitable by an unauthorized attacker, and the vector indicates no privileges or user interaction are required. Exploitation is network-accessible and has low attack complexity.

What is the potential impact if exploitation succeeds?

An attacker may elevate privileges because of an incorrect permission assignment for a critical Azure Front Door resource. The supplied severity vector indicates high confidentiality impact and low integrity and availability impact.

CVE-2026-118742: Azure Front Door Elevation of Privilege Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?