An integer overflow or wraparound vulnerability exists in Microsoft Azure Data Manager for Energy that enables an authorized attacker to execute arbitrary code remotely. The vulnerability is classified under CWE-190. The CVSS 3.1 base score is 8.5, indicating high impact on confidentiality, integrity, and availability. The vulnerability requires low privileges and high attack complexity, with no user interaction needed. Microsoft has published an official fix and manages remediation for this cloud-hosted service.

Successful exploitation allows an authorized attacker to execute code remotely, potentially leading to full compromise of the affected Azure Data Manager for Energy service. This impacts confidentiality, integrity, and availability of the service.

Microsoft has released an official fix for this vulnerability and manages remediation for this cloud-hosted service. Users should refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69419 for detailed guidance. No additional user action is required beyond ensuring the service is updated as managed by Microsoft.