# Microsoft Azure Connected Machine Agent vulnerabilities

Source: https://junglewise.ai/threats/technologies/azure-connected-machine-agent  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/azure-connected-machine-agent.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 3 vulnerabilities in Microsoft Azure Connected Machine Agent: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-40381, was published on 12 May 2026.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 3 (0 critical, 0 exploited in the wild)

## About Microsoft Azure Connected Machine Agent

The Azure Connected Machine Agent enables the management of Windows and Linux machines hosted outside of Azure on your corporate network or other cloud providers.

## Latest Microsoft Azure Connected Machine Agent vulnerabilities

- [CVE-2026-40381: Microsoft Azure Connected Machine Agent privilege escalation](https://junglewise.ai/threats/cve-2026-40381-microsoft-azure-connected-machine-agent-privilege-escalation) (high, CVSS 7.8, published 12 May 2026)
- [CVE-2025-58724: Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.](https://junglewise.ai/threats/cve-2025-58724-improper-access-control-in-azure-connected-machine-agent-allows) (high, CVSS 7.8, published 14 Oct 2025)
- [CVE-2025-47989: Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.](https://junglewise.ai/threats/cve-2025-47989-improper-access-control-in-azure-connected-machine-agent-allows) (high, CVSS 7, published 14 Oct 2025)

## Most severe Microsoft Azure Connected Machine Agent vulnerabilities

- [CVE-2025-58724: Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.](https://junglewise.ai/threats/cve-2025-58724-improper-access-control-in-azure-connected-machine-agent-allows) (high, CVSS 7.8, published 14 Oct 2025)
- [CVE-2026-40381: Microsoft Azure Connected Machine Agent privilege escalation](https://junglewise.ai/threats/cve-2026-40381-microsoft-azure-connected-machine-agent-privilege-escalation) (high, CVSS 7.8, published 12 May 2026)
- [CVE-2025-47989: Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.](https://junglewise.ai/threats/cve-2025-47989-improper-access-control-in-azure-connected-machine-agent-allows) (high, CVSS 7, published 14 Oct 2025)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Microsoft technologies

- [Microsoft Windows](https://junglewise.ai/threats/technologies/windows): 2,362 vulnerabilities
- [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 589 vulnerabilities
- [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 565 vulnerabilities
- [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 534 vulnerabilities
- [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 534 vulnerabilities
- [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 528 vulnerabilities
- [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 521 vulnerabilities
- [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 517 vulnerabilities
- [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 494 vulnerabilities
- [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 476 vulnerabilities
- [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809): 380 vulnerabilities
- [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 373 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft Azure Connected Machine Agent vulnerabilities", https://junglewise.ai/threats/technologies/azure-connected-machine-agent, 11 November 2026.