You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2026 26148
About this tag
CVE-2026-26148 is a high-severity elevation-of-privilege vulnerability in the Azure AD SSH Login extension for Linux, disclosed in Microsoft's March 2026 security updates. The flaw allows local attackers to gain root access on affected systems, turning a convenience feature into a critical attack vector. Administrators must apply per-machine remediation immediately. This tag covers discussions on the vulnerability's background, CVSS score, and mitigation steps for Windows and Azure environments.
Microsoft's March security roll-up exposed a high-severity elevation-of-privilege flaw in the Azure AD SSH Login extension for Linux that essentially handed local attackers a clear path to root on affected systems, forcing administrators to treat what looks like a convenience feature as a...