CVE-2026-24303
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker could exploit the improper certificate validation to elevate privileges in the Microsoft Partner Center environment, potentially leading to unauthorized access to resources and data.
Recommendation
Apply the available Microsoft security updates for Microsoft Partner Center and verify certificate validation configuration. Monitor for unusual authentication and privilege escalation attempts.
Other vulnerabilities in Microsoft Partner Center
See all- CVE-2026-96207Critical
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
- CVE-2025-65041Critical
Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69558High
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.
- CVE-2026-34327High
A vulnerability in Microsoft Partner Center allows externally controlled references to a resource in another sphere, enabling an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS