PT-2026-4312 · Microsoft · Azure Front Door

Parul Garg + 1 · Published 2026-01-22 · Updated 2026-02-27 · CVE-2026-24306

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Azure Front Door (affected versions not specified)

Description Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network. The issue allows an attacker to gain elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2026-00847

CVE-2026-24306

Affected Products

Azure Front Door

References · 11

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24306 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00847 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-24306 · Security Note
• https://t.me/cveNotify/153464 · Telegram Post
• https://twitter.com/CVEnew/status/2014576998866420084 · Twitter Post
• https://twitter.com/CveFindCom/status/2014483026562908473 · Twitter Post
• https://twitter.com/vuldb/status/2014704319086674257 · Twitter Post
• https://twitter.com/NCIIPC/status/2014663921932894412 · Twitter Post
• https://t.me/msrcreports/3007 · Telegram Post
• https://twitter.com/TheHackerWire/status/2014488466600690087 · Twitter Post
• https://t.me/cveNotify/149632 · Telegram Post