Overview
What is CVE-2026-57104?
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.
Vulnerability intelligence
CVE-2026-57104 and is rated Critical severity with a CVSS score of 9.6. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.