The vulnerability is a missing authorization check in Microsoft Azure Event Grid. An attacker who already has valid credentials on the network can exploit this flaw to impersonate event messages, causing the system to accept forged events as legitimate. This can lead to unauthorized triggering of downstream actions, potentially compromising data integrity and availability.

Microsoft Azure Event Grid System is the affected product. No specific version information is provided in the CVE listing.

The CVSS score of 7.7 indicates high risk. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. The likely attack vector requires an authorized network presence; an attacker with legitimate access can perform spoofing by sending forged event messages across the network.