CVE-2026-58275Disclosure(microsoft / azure_dns)

MEDIUMCVSS 9.8 · CRITICAL

Exploitation observed; activity peaked at 7 mentions and remains active

Immediate actions

Patch microsoft azure_dns systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.

microsoft CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58275

Weakness type (CWE)

CWE-862

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

DECLINING

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

azure_dns

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
11 mentions across 4 observed days
Momentum state: declining

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 5 signals
Technical details provided in 8 signals
Disclosure: 7 classified signals
General: 1 classified signal
Peaked 3d ago at 7 mentions (2026-07-24); latest day: 1
11 total mentions across 4 days

Affected systems

Vendors

microsoft

Products

azure_dns

1 version affected across 1 product

Deep dive

Activity timeline11 mentions / 4d

Signal classification4 categories

Disclosure

763.6%

Patch

218.2%

General

19.1%

Active Exploitation

19.1%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-24	7	Disclosure5General1Patch1
2026-07-27	2	Active Exploitation1Disclosure1
2026-07-28	1	Patch1
2026-07-31	1	Disclosure1

Full discourse11 posts

kawn@kawn202088d
Disclosure
#securityupdate #microsoft #定例外 2026. 7.23 Azure DNS Elevation of Privilege Vulnerability CVE-2026-58275 Security Vulnerability リリース日: - マイクロソフト https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58275
Post summary
The post announces Microsoft’s disclosure of Azure DNS elevation‑of‑privilege vulnerability CVE‑2026‑58275 and links to the official update guide, but provides no technical specifics, PoC, exploit details, or patch information.
1010042
92 followersView on X
Kaitan ID Security@KaitanSecurity84d
Disclosure
🛡️ Microsoft Azure and Exchange — Triple Perfect-Score Privilege Escalation (CVSS 10.0) Microsoft contributed three CVSS 10.0 entries this week. CVE-2026-62825 is an Elevation of Privilege vulnerability in Azure Key Vault. CVE-2026-58275 affects Azure DNS with the…
Post summary
Microsoft announced three CVSS 10.0 privilege‑escalation vulnerabilities affecting Azure Key Vault and Azure DNS, but no proof‑of‑concept or exploit details were provided.
1000046
87 followersView on X
Orizon@OrizonCyber91d
Patch
🚨 CVE-2026-58275 — CVSS 10/10 ██████████ Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network. Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/cgISPsqzkj
Post summary
CVE-2026-58275 is a critical Azure DNS privilege escalation flaw due to missing authorization, and a patch is available.
1000065
68 followersView on X
Israel@f1tym187d
Patch
Microsoft patches critical Azure DNS privilege escalation (CVE-2026-58275), CVSS 10 https://ift.tt/mGcSahU
Post summary
Microsoft has released a critical patch for Azure DNS privilege escalation CVE‑2026‑58275, which has a CVSS score of 10.
0000039
1.0K followersView on X
𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 ℍ𝕒𝕔𝕜𝕥𝕚𝕧𝕚𝕤𝕥☭⃠🅇@YourAnon_irc87d
Active Exploitation
New critical flaws! Check Point zero-day (CVE-2026-16232) allows admin takeover, Azure DNS (CVE-2026-58275) enables traffic redirection. DNS poisoning via Wi-Fi gateways also active. High risk to data privacy & integrity in transit. #Cybersecurity #News
Post summary
The post reports critical CVEs with indications of active DNS poisoning attacks, but no PoC, exploit code, or patch details are provided.
0000066
16 followersView on X
𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 ℍ𝕒𝕔𝕜𝕥𝕚𝕧𝕚𝕤𝕥☭⃠🅇@YourAnon_irc91d
Disclosure
Critical vulns: Azure DNS (CVE-2026-58275) allows MiTM, & Check Point zero-day (CVE-2026-16232) grants admin access. Both imperil data privacy & integrity in transit. Urgent patching needed. #Cybersecurity #InfoSec #News
Post summary
The post discloses two critical CVEs affecting Azure DNS and Check Point, indicating MitM and admin‑level access vulnerabilities, and stresses the need for urgent patching.
0000061
16 followersView on X
Upwind Security MDR@UpwindMDR91d
Disclosure
🚨 CRITICAL - Azure DNS Missing Authorization Privilege Escalation (CVE-2026-58275) Azure DNS contains a missing authorization flaw in its management/control-plane operations that can allow unauthorized actions against DNS resources. The root cause is Missing Authorization (CWE-862), where privilege checks are not properly enforced before executing sensitive requests. An attacker can exploit this over the network by sending crafted requests to affected Azure DNS endpoints/APIs without valid credentials, leveraging the authorization gap to perform actions they should not be allowed to. If exploited, the impact is full privilege escalation over DNS configurations, enabling domain takeover pathways, traffic redirection, service disruption, and potential downstream data interception. 👉 Affected: Azure DNS (service-side; versions N/A) | Upgrade to Microsoft’s latest mitigated service build / apply vendor guidance immediately
Post summary
The post announces a critical missing‑authorization vulnerability (CVE‑2026‑58275) in Azure DNS, highlighting its potential for full DNS privilege escalation and urging users to upgrade to the latest mitigated service build.
0000083
254 followersView on X
Orizon@OrizonCyber91d
General
🔗 Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58275
Post summary
Only a URL to a Microsoft security update page is provided, with no additional context on exploitation, patches, or vulnerability details.
0000041
68 followersView on X
ThreatAft@ThreatAft91d
Disclosure
🚨 Microsoft Azure DNS CVSS 10.0 — Unauthenticated Privilege Escalation CVE-2026-58275: Missing authorization allows attackers to manipulate DNS records. → http://threataft.com/articles/azure-dns-cve-2026-58275-privilege-escalation #cybersecurity #infosec #Azure #Microsoft #DNS
Post summary
This post discloses the Azure DNS CVE‑2026‑58275 vulnerability, noting a CVSS score of 10.0 and detailing an unauthenticated privilege escalation that permits DNS record manipulation.
0000077
35 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds91d
Disclosure
CVE-2026-58275 Missing Authorization in Azure DNS Enables Unauthorized Privilege Escalation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-58275
Post summary
The post announces CVE-2026-58275, describing an Azure DNS privilege escalation flaw due to missing authorization, but provides no PoC, exploit code, or patch information.
00000109
4.1K followersView on X
Windows Forum@windowsforum91d
Disclosure
⚠️ Azure DNS has an elevation-of-privilege flaw, and no, rebooting every Windows PC won’t fix it. Review RBAC, DNS change controls, and logs—cloud security still needs adult supervision. https://windowsforum.com/threads/cve-2026-58275-azure-dns-privilege-flaw-requires-rbac-review.440233/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #CloudSecurity #AzureDns #DnsMonitoring #AzureRbac https://t.co/SL1rc5EsAg
Post summary
The tweet announces a new elevation‑of‑privilege vulnerability in Azure DNS and recommends reviewing RBAC and DNS controls as mitigations.
0000059
1.3K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	azure_dns	-	-	-

Explore more

Back to dashboard microsoft CVEs azure_dns vulnerabilities

What researchers are saying

CVE-2026-58275

Kaitan ID Security[verified]@KaitanSecurityDisclosure

Microsoft announced three CVSS 10.0 privilege‑escalation vulnerabilities affecting Azure Key Vault and Azure DNS, but no proof‑of‑concept or exploit details were provided.

Orizon[verified]@OrizonCyberPatch

CVE-2026-58275 is a critical Azure DNS privilege escalation flaw due to missing authorization, and a patch is available.

Israel[verified]@f1tym1Patch

Microsoft has released a critical patch for Azure DNS privilege escalation CVE‑2026‑58275, which has a CVSS score of 10.

Upwind Security MDR[verified]@UpwindMDRDisclosure

The post announces a critical missing‑authorization vulnerability (CVE‑2026‑58275) in Azure DNS, highlighting its potential for full DNS privilege escalation and urging users to upgrade to the latest mitigated service build.

Orizon[verified]@OrizonCyberGeneral

Only a URL to a Microsoft security update page is provided, with no additional context on exploitation, patches, or vulnerability details.

Windows Forum[verified]@windowsforumDisclosure

The tweet announces a new elevation‑of‑privilege vulnerability in Azure DNS and recommends reviewing RBAC and DNS controls as mitigations.

kawn@kawn2020Disclosure

The post announces Microsoft’s disclosure of Azure DNS elevation‑of‑privilege vulnerability CVE‑2026‑58275 and links to the official update guide, but provides no technical specifics, PoC, exploit details, or patch information.

𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 ℍ𝕒𝕔𝕜𝕥𝕚𝕧𝕚𝕤𝕥☭⃠🅇@YourAnon_ircActive Exploitation

The post reports critical CVEs with indications of active DNS poisoning attacks, but no PoC, exploit code, or patch details are provided.