CVE-2026-83947

Received Received - Intake

Missing Authorization in Azure Event Grid Allows Spoofing

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: Microsoft Corporation

Description

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-08

Generated

2026-10-09

AI Q&A

2026-10-09

EPSS Evaluated

N/A

NVD

CVE-2026-83947

EUVD

EUVD-2026-95396

Affected Vendors & Products

Vendor	Product	Version / Range
Microsoft	Azure	Event Grid System *

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability is a missing authorization issue in Azure Event Grid that allows an authorized attacker to spoof communications over a network. It enables an attacker to impersonate legitimate users or services by bypassing proper authorization checks.

Impact Analysis

An attacker could exploit this to send fake events or commands, potentially leading to unauthorized actions, data breaches, or service disruptions. If you rely on Azure Event Grid for critical operations, this could compromise system integrity and trust in your infrastructure.

Compliance Impact

This vulnerability could lead to unauthorized access or data exposure, violating GDPR's data protection principles or HIPAA's security requirements. Non-compliance risks fines, legal penalties, and reputational damage due to potential breaches of confidentiality and integrity.

Mitigation Strategies

Apply the latest security updates from Microsoft for Azure Event Grid. Review and enforce strict authorization policies to prevent unauthorized access. Monitor network traffic for suspicious activity related to spoofing attempts.

Hi! I’m here to help you understand CVE-2026-83947. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70