CVE-2026-69558
HighCVSS 8.6Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.
Risk Assessment
An unauthorized attacker can exploit this vulnerability to access data they should not have access to, leading to confidentiality breach.
Recommendation
Apply patches from Microsoft for Partner Center and review authorization mechanisms based on keys.
Other vulnerabilities in Microsoft Partner Center
See all- CVE-2026-96207Critical
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-24303Critical
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
- CVE-2025-65041Critical
Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-34327High
A vulnerability in Microsoft Partner Center allows externally controlled references to a resource in another sphere, enabling an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS