CVE-2026-41098

Name of the Vulnerable Software and Affected Versions Azure Stack Edge (affected versions not specified)

Description Improper neutralization of input during web page generation in the certificate management interface allows an authorized attacker to perform cross-site scripting (XSS), which is a technique where malicious scripts are injected into trusted websites. This can enable the attacker to conduct spoofing attacks over a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.