Advisories · Technology

Microsoft Arc Enabled Servers - Azure Connected Machine Agent.

Every CVE that names Microsoft Arc Enabled Servers - Azure Connected Machine Agent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96204 CVE record

CVSS 6.5 Medium

Azure Arc Elevation of Privilege Vulnerability
- Microsoft Arc Enabled Servers - Azure Connected Machine Agent
- Server-side request forgery (SSRF)
Not analysed yet 13 Oct 2026
CVE-2026-26117 CVE record

CVSS 7.8 High

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
- Microsoft Arc Enabled Servers - Azure Connected Machine Agent
- Authentication bypass
Not analysed yet 10 Mar 2026
CVE-2025-58724 CVE record

CVSS 7.8 High

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
- Microsoft Arc Enabled Servers - Azure Connected Machine Agent
- Broken access control
Not analysed yet 14 Oct 2025
CVE-2025-47989 CVE record

CVSS 7.0 High

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
- Microsoft Arc Enabled Servers - Azure Connected Machine Agent
- Broken access control
Not analysed yet 14 Oct 2025