CVE-2026-58275 is a missing authorization vulnerability (CWE-862) in Microsoft Azure DNS, a cloud-hosted DNS service. The flaw permits an attacker without prior privileges to escalate their privileges over the network, potentially impacting the integrity and availability of the service. The vulnerability is rated critical with a CVSS 3.1 base score of 10.0, reflecting network attack vector, no required privileges or user interaction, and complete impact on integrity and availability. Microsoft has released an official fix and manages remediation for this cloud service. No known exploits are reported in the wild as of the publication date.

An attacker can elevate privileges without authorization in Azure DNS, potentially leading to unauthorized changes or disruptions affecting the integrity and availability of DNS services within the network. This could compromise network operations relying on Azure DNS.

Microsoft has provided an official fix for this vulnerability and manages remediation for Azure DNS as a cloud service. Users should ensure their Azure DNS service is updated according to Microsoft's guidance available at the official advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58275. No additional user action is required beyond applying the official fix.