Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-42822: Azure Local Disconnected Operations Privilege Escalation

CVE-2026-42822

Summary

An unauthorized attacker can gain elevated privileges over a network if they exploit a weakness in Azure Local Disconnected Operations. This means they could access sensitive information or make changes to your system without permission. To protect yourself, update Azure Local Disconnected Operations to the latest version.

Original title

Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.

Original description

Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.

nvd CVSS3.1 10.0

Vulnerability type

CWE-287 Improper Authentication

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42822

Published: 18 May 2026 · Updated: 28 May 2026 · First seen: 18 May 2026