CVE-2026-83947: Azure Event Grid Spoofing Vulnerability
Published Oct 8, 2026
·Updated
Azure Event Grid Spoofing Vulnerability
Other sources
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
— Microsoft
Affected Software
2 affected components
Microsoft Azure Event Grid
Microsoft Azure Event Grid System
Event History
Oct 8, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·10:15 PM
Data Sourced
via MITRE·10:15 PM
DescriptionSeverity
Data Sourced
via NVD·11:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
Exploitation requires an authorized attacker with low privileges who can reach Azure Event Grid over the network. No user interaction is required.
2
What is the likely security impact?
The vulnerability allows spoofing and has an integrity impact rated high. The provided data does not indicate confidentiality or availability impact.
3
Are Azure Event Grid System deployments affected?
Microsoft Azure Event Grid System is listed among the affected software, along with Microsoft Azure Event Grid.