PatchTheCVEpartner center vulnerabilities and fixes
Recent CVEs affecting partner center, with upgrade or downgrade steps. 4 tracked.
Also searched as: partnercenter.
partner center has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-10-08. Highest priority: CVE-2026-96207 (score 61/100).
- CVE-2026-24303 CRITICAL 9.6 MITIGATE Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privile
- CVE-2026-34327 HIGH 8.2 MITIGATE Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthor
- CVE-2026-69558 HIGH 8.6 MITIGATE Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker t
- CVE-2026-96207 CRITICAL 10.0 MITIGATE Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privile
FAQ
How do I fix partner center vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is partner center being exploited right now?
None of the tracked partner center CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which partner center CVE should I patch first?
CVE-2026-96207 currently ranks highest (61/100): Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privile.