CVE-2026-24300 is an improper access control vulnerability in Microsoft Azure Front Door, a cloud-hosted service. The flaw enables elevation of privilege, potentially allowing attackers to gain unauthorized access and perform actions with elevated permissions. The CVSS v3.1 base score is 9.8 (critical), reflecting network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. Microsoft has published an official fix and manages remediation for this cloud service. The vendor advisory is available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24300.

Successful exploitation of this vulnerability could lead to complete compromise of the Azure Front Door service, affecting confidentiality, integrity, and availability of the service and potentially the applications behind it. Given the critical CVSS score of 9.8, the impact is severe. However, no known exploits are currently reported in the wild.

Microsoft has released an official fix for this vulnerability and manages remediation for Azure Front Door as a cloud service. Customers should verify that their Azure Front Door instances have been updated according to the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24300. No additional action is required beyond applying the official fix.