{"id":"CVE-2026-83947","published":"2026-10-08T23:17:04.423","lastModified":"2026-10-09T16:35:35.900","description":"Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.","cvssScore":7.7,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83947","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Azure Event Grid lacks proper authorization checks, allowing authenticated users to spoof network communications and potentially impersonate other services or users. This creates a significant security gap where attackers can leverage their existing access to perform unauthorized actions within the event grid infrastructure.","exploitability":"Exploitation requires an authenticated user with access to Azure Event Grid, making it moderately difficult to achieve but not highly complex, as the attacker needs only to leverage their existing credentials to craft spoofed network events.","blast_radius":"The impact could be substantial across multiple services that rely on Event Grid for event routing and processing, potentially allowing attackers to manipulate workflows, trigger unauthorized actions, or disrupt service communications.","remediation":"Enable strict authorization policies and validate all incoming events against the originating service identities to prevent spoofing attempts.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["authorization","spoofing","azure","event-grid"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:22:48.377Z"}}