A vulnerability was found in Microsoft Payment Orchestrator Service. It has been rated as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to missing authentication.
This vulnerability is traded as CVE-2026-26125. It is possible to initiate the attack remotely. There is no exploit available.
This product is a managed service, so users are unable to manage vulnerability countermeasures on their own.
