This vulnerability in Azure Stack HCI allows an unauthorized attacker to gain information by observing differences in responses over the network, classified as CWE-204 (Observable Response Discrepancy). It has a CVSS 3.1 base score of 8.6, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. The impact is high confidentiality loss without integrity or availability impact. Microsoft manages remediation for this cloud-hosted service and has released an official fix.

The vulnerability enables unauthorized attackers to disclose sensitive information over the network by exploiting observable differences in system responses. This can lead to significant confidentiality breaches. There is no impact on integrity or availability. No known exploits are reported in the wild at this time.

Microsoft has released an official fix for this vulnerability. As this is a cloud-hosted service, Microsoft manages the remediation server-side. Users should consult the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69519 for detailed patch and update information and ensure their Azure Stack HCI environments are updated accordingly.