PT-2026-47873 · Microsoft · Azure Stack Edge

Hay Mizrachi · CVE-2026-41098 · Published 2026-06-09 · Updated 2026-06-09

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Azure Stack Edge (affected versions not specified)

Description Improper neutralization of input during web page generation in the certificate management interface allows an authorized attacker to perform cross-site scripting (XSS), which is a technique where malicious scripts are injected into trusted websites. This can enable the attacker to conduct spoofing attacks over a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2026-08347

CVE-2026-41098

Affected Products

Azure Stack Edge

References · 3

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41098 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41098 · Security Note
• https://bdu.fstec.ru/vul/2026-08347 · Security Note