DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Azure DevOps, Data Factory and Cloud Shell: Mehrere Schwachstellen
view advisory published 2026-03-19
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Azure DevOps, Data Factory und Cloud Shell ausnutzen, um seine Privilegien zu erhöhen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-32169US | critical9.8 | — | ||
Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-23659US | high7.5 | — | ||
Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-23658US | critical9.8 | — | ||
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network. | ||||
02
references
External citations — patches, advisories, analysis.
- Microsoft Leitfaden für Sicherheitsupdates vom 2026-03-19external
- Microsoft Security Update Guide CVE-2026-23658 vom 2026-03-19external
- Microsoft Security Update Guide CVE-2026-23659 vom 2026-03-19external
- Microsoft Security Update Guide CVE-2026-32169 vom 2026-03-19external
- WID-SEC-W-2026-0794 - CSAF Versionself
- WID-SEC-2026-0794 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan