CVE-2026-110063: VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
Received
Published 22-10-2026Last modified 22-10-2026
Vulnerability summary
CVE-2026-110063 is a critical (CVSS 10.0) Link Following vulnerability in microsoft vm inspector for azure virtual machines.
CVSS score
10.0/10
010
Critical · v3.1 (CVE.org)EPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Timeline
- 22-10-2026PublishedVulnerability first disclosed.
- 22-10-2026Last modifiedVulnerability information updated.
Description
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
CVSS metrics
2 scores · 2 sources · 1 versionCritical 10.0Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:CSourcesAll 2 agree
- NVDNIST10.0CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microsoft1 product
1 vendor · 1 product
