Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
https://github.com/j-dahl7/arc-cloud-c2-sentinel
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26117