CVE-2026-83948

HIGH 8.0CVE-2026-83948 · Published 08/09/2026 · updated 14/09/2026

In short

CVE-2026-83948 is a HIGH (CVSS 8.0) vulnerability affecting vm repair (microsoft).
Chance of exploitation in the next 30 days (EPSS): 0.59%, higher than 48.4% of all vulnerabilities.
Fix: update to 2.2.1 or later.

Package	Affected versions	Patched versions
vm repair microsoft	`< 2.2.1`	`2.2.1`

Description

Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83948 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free