Microsoft Arc Enabled Servers Azure Connected Machine Agent — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Arc Enabled Servers Azure Connected Machine Agent, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-26117 — CVSS 7.8 (high): Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate…