Incorrect permission assignment for critical resource in Azure Front Door - CVE-2026-118742
Published: November 11, 2026
Vulnerability identifier: #VU165843
CSH Severity: High
CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-118742
CWE-ID: CWE-732
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to elevate privileges, disclose sensitive information, modify data, and disrupt service availability.
The vulnerability exists due to incorrect permission assignment for a critical resource in Azure Front Door (AFD) when accessing resources over a network. A remote attacker can exploit incorrectly assigned permissions to gain elevated access, potentially exposing sensitive information and enabling limited modification of data and disruption of service availability.
Affected software
Azure Front Door
How to mitigate CVE-2026-118742
Install security update from vendor's website.