CVE-2026-26148

8.1 highEPSS 0.4%

High (8.1) in microsoft azure ad ssh login extension for linux. EPSS 0.4% chance of exploitation in the next 30 days.

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.

Severity

8.1 high

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-454
Published: 2026-03-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19