This vulnerability, identified as CWE-285 (Improper Authorization), affects the Microsoft Azure Portal cloud service. It enables an unauthorized attacker to disclose sensitive information over a network without needing privileges or user interaction. The vulnerability has a CVSS 3.1 base score of 9.3, reflecting critical severity with high confidentiality impact and low complexity of exploitation. Microsoft has published an official fix and manages remediation for this cloud-hosted service. No known exploits in the wild have been reported as of the publication date.

Successful exploitation can lead to unauthorized disclosure of sensitive information in the Azure Portal environment. The vulnerability does not impact integrity but has a high confidentiality impact and a low impact on availability. Attackers require no privileges and no user interaction, making it a critical risk if unpatched.

Microsoft has released an official fix for this vulnerability and manages remediation for the Azure Portal cloud service. Users should ensure their Azure environments are updated according to Microsoft's guidance at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62835. No additional action is required beyond applying the official fix.