CVE-2026-26117

Published Mar 10, 2026·Updated Jun 17, 2026

NVD Description

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.

Public Exploits & PoCs1 found

PoC: arc-cloud-c2-sentinel

Sentinel detection lab for Azure Arc identity takeover (CVE-2026-26117) and Living-off-the-Cloud C2 attacks. Analytics rules, hunting queries, workbook, Bicep infrastructure, and C2 simulation script.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free