CVE-2026-62830

CVE-2026-62830 concerns the Azure SRE Agent, where a missing authorization flaw could allow an authenticated, network-based attacker to elevate privileges. The incident is rated critical (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H; base score 9.9). Documents identify the root cause as insuffic...

CVE-2026-32173

Azure SRE Agent vulnerability CVE-2026-32173 involves improper authentication that could let an unauthenticated attacker disclose information over a network. Affected component is the Azure SRE Agent; the underlying issue is authentication checks failing, enabling information disclosure with netw...