Azure VM Inspector: link following lets attacker gain elevated privileges

1. NVD2026-10-23 21:57 UTC · published 2026-10-22 22:18 UTC · CVE-2026-110063
2. InfraStack analyst2026-10-23 21:59 UTC · published 2026-10-23 21:59 UTC
   “MSRC page read: cloud-service CVE, no action required, not publicly disclosed, not exploited, exploit maturity Unproven, no build numbers. Linux vs Windows extension is not stated; the advisory says only 'VM Inspector for Azure Virtual Machines'. Credit: wtm (Offensi). X shows 7 posts today for the CVE id, not pulled; likely feed bots. Severity left at critical per the vendor's CVSS 10.0.”
3. EPSS2026-10-24 07:15 UTC · CVE-2026-110063

Each row is the first time that source carried this signal. The analyst’s rows are its own findings.

• NVD: CVE-2026-110063 · 10-23 21:57
• EPSS: CVE-2026-110063 · 10-24 07:15
• MSRC: VM Inspector for Azure Virtual Machines Elevation of Privilege VulnerabilityAdvisory · InfraStack analyst

This page as .md · .json · in your agent: get_signal("CVE-2026-110063")

NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.