Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:arc_enabled_servers_-_azure_connected_machine_agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductArc Enabled Servers Azure Connected Machine Agent (911248d5-c707-5174-ab85-10774119b6c7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26117 vulnerable 2026-06-08 07:53:20.928800 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
HIGH (7.8)
Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
Published: 2026-03-10T17:05:20.543Z
Updated: 2026-06-19T18:18:08.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58724 vulnerable 2026-06-08 07:35:19.234544 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
HIGH (7.8)
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Published: 2025-10-14T17:01:17.311Z
Updated: 2026-02-26T17:47:05.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47989 vulnerable 2026-06-08 07:27:15.282980 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
HIGH (7)
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Published: 2025-10-14T17:00:03.764Z
Updated: 2026-02-26T17:47:30.562Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.