Description
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to perform spoofing over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Azure Stack Edge | 2.2.0 – < 3.3.2604.3097 | 3.3.2604.3097 |
Advisories 3
- WID-SEC-2026-1842 Microsoft Azure: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 9, 2026
- NCSC-2026-0183 Kwetsbaarheden verholpen in Microsoft Azure NCSC-NL (Netherlands) · Jun 9, 2026
- MSRC-CVE-2026-41098 Azure Stack Edge Spoofing Vulnerability Microsoft Security Response Center · Jun 9, 2026
References
- Azure Stack Edge Spoofing Vulnerability vendor-advisory patch