CVE-2026-83946: Azure Portal Spoofing Vulnerability
Published Sep 17, 2026
·Updated
Azure Portal Spoofing Vulnerability
Other sources
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.
— Microsoft
Affected Software
1 affected component
Microsoft Azure Portal
Event History
Sep 17, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·11:04 PM
Data Sourced
via MITRE·11:04 PM
DescriptionSeverity
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker can attempt exploitation over a network without prior privileges, but user interaction is required. The available information identifies the flaw as cross-site scripting that enables spoofing.
2
What impact is indicated by the severity vector?
The severity vector indicates high confidentiality impact and low integrity impact, with no availability impact. Its scope is changed, meaning the vulnerable component's impact can extend beyond its own security authority.