CVE-2026-118288
Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally.
CVSS
7.0
Alto
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 nov 2026 · Última mod.: 10 nov 2026 · CWE-732
Sin historial EPSS suficiente todavía.
Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-859297.8 ALT—
——0Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.4hCVE-2026-1187428.6 ALT—
——0Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.3hCVE-2026-1057347.0 ALT—
——0Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.4hCVE-2026-145433.9 BAJ2.8%
——1The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account.17hCVE-2026-129637.4 ALT4.5%
——1A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.17hCVE-2026-1121257.3 ALT2.5%
——1Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor.
This issue affects HA Monitor: from 01-00 before 01-83-01.3h