Microsoft Aci Confidential Containers — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Aci Confidential Containers, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-23651 — CVSS 6.7 (medium): Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.
• CVE-2026-26124 — CVSS 6.7 (medium): '.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.
• CVE-2026-26122 — CVSS 6.5 (medium): Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a…