CVE-2026-26122
Received
Received - Intake
Information Disclosure in Microsoft ACI Confidential Containers
Publication date: 2026-03-05
Last updated on: 2026-03-16
Assigner: Microsoft Corporation
Description
Description
Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| microsoft | aci_confidential_containers | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1188 | The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure. |