CVE-2026-47643: Microsoft Azure Stack Edge

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.

Affected products

• Microsoft Azure Stack Edge: before 3.3.2604.3097 (fixed in 3.3.2604.3097)

Published 2026-06-09. Last modified 2026-07-23.