CVE-2026-47299: Microsoft Azure Monitor Agent

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.

Affected products

• Microsoft Azure Monitor Agent: from 1.0.0, before 1.43 (fixed in 1.43)

Published 2026-08-11. Last modified 2026-08-13.