Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.

A vulnerability in Microsoft Partner Center allows improper access control, enabling authorized attackers to elevate their privileges over a network. This represents a significant security risk as it affects Microsoft's partner ecosystem and could allow attackers with initial access to gain elevated permissions. The vulnerability is tracked as CVE-2026-24303 and has been assigned a high criticality rating due to the potential for privilege escalation attacks.