CVE-2026-70009
Critical · CVSS 9.3- CVSS
- 9.3
- nvd
- EPSS
- 0.74%
- 53th pct
- KEV
- No
- Class
- other
- CWE-22
Description
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
References
Status: profiled · ingested 2026-09-25T18:00:19.000Z