Skip to content
NewA calmer, faster ZeroHour
Vulnerability

CVE-2026-110063

Link following privilege elevation in Azure VM Inspector

CVSS 3.1
10.0 critical
EPSS
—
Published
·
Modified
Analyze CVE-2026-110063 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

VM Inspector for Azure Virtual Machines follows links improperly before file access. An unauthorized attacker on the network can trigger it with no credentials and no user interaction, then elevate privileges with impact beyond the component. Azure customers who use VM Inspector are affected. Microsoft has not listed affected builds.

What to do: Apply Microsoft's update for CVE-2026-110063. No fixed version or workaround is listed.

ProductAffected
Microsoft VM Inspector for Azure Virtual Machines—
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.

Weakness
CWE-59
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (—)

In the news

0 stories

No ingested article mentions this CVE yet.