CWE-441

Critical Microsoft Azure Arc Elevation of Privilege Flaw Allows Unauthenticated Confused Deputy Exploitation Across Hybrid Clusters CVE-2026-69399

Microsoft discloses critical CVSS 10.0 flaw CVE-2026-69399 in Azure Arc, enabling unauthenticated attackers to exploit confused deputy proxies across hybrid cloud nodes.