Microsoft Azure Virtual Network Gateway — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure Virtual Network Gateway, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-40411 — CVSS 9.9 (critical): Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.