CVE-2026-26124

CVE-2026-26124 describes a local privilege escalation vulnerability within Azure Compute Gallery, where an authenticated attacker can leverage a path traversal flaw ('.../...//') to gain elevated privileges. This medium-severity vulnerability carries a CVSS score of 6.7, indicating that an attacker with high privileges can achieve high impact on confidentiality, integrity, and availability with low attack complexity. While there is no known public exploit code or active exploitation, the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the security community.