CVE-2026-23651CWE-625

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Medium · published March 5, 2026

CVSS v3.1
6.7
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00617 · 48.9th percentile
Weakness
CWE-625 · Permissive Regular Expression
Published
2026-03-05T22:18Z
EPSS history
Timeline
  • 05 MAR 22:18Z
    Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
    cvelistv5