CVE-2026-26147Disclosure(microsoft / azure_stack_hci)

LOWCVSS 7.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch microsoft azure_stack_hci systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26147

Weakness type (CWE)

CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

azure_stack_hci

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-05-23); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

microsoft

Products

azure_stack_hci

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-26147

Classification over time

Date	Total	Labels

2026-05-23	1	Disclosure1
2026-05-27	1	Patch1

Full discourse2 posts

DFIR Lab@DFIR_Lab136d
Patch
🚨 HIGH SEVERITY: CVE-2026-26147 (CVSS 7.7) Azure Compute Gallery vulnerable to information disclosure via improper input validation. Authorized attackers can exploit over network. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #Azure https://t.co/qn6VdTUxUi
Post summary
The tweet highlights a high‑severity information‑disclosure vulnerability in Azure Compute Gallery, urging users to patch immediately, with no PoC or exploit details provided.
0000063
30 followersView on X
CVE@CVEnew140d
Disclosure
CVE-2026-26147 Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network. https://www.cve.org/CVERecord?id=CVE-2026-26147
Post summary
The post describes CVE-2026-26147 as an input validation flaw in Azure Compute Gallery that enables authorized attackers to disclose network information, with no details on PoC, exploit, or patch.
00000135
57.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	azure_stack_hci	-	-	-

Explore more

Back to dashboard microsoft CVEs azure_stack_hci vulnerabilities