CVE-2026-35430 Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability

...

CVE-2026-35430

CVE-2026-35430 covers an authorization bypass in Azure Privileged Identity Management (PIM) that permits an authorized attacker to elevate privileges over the network via a user-controlled key. Root cause: authorization bypass within PIM. Impact: high, enabling privilege escalation with network a...

CVE-2026-35430: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Azure Privileged Identity Management PIM allows an authorized attacker to elevate privileges over a network...

Microsoft Azure Privileged Identity Management security vulnerabilities

Microsoft Azure Privileged Identity Management is a cloud-based privilege account and permission lifecycle management service provided by Microsoft. There is a security vulnerability in Microsoft Azure Privileged Identity Management, which stems from bypassing authorization through user-controlle...