DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Azure: Mehrere Schwachstellen
view advisory published 2026-05-21
Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure und Microsoft Azure Stack ausnutzen, um Informationen offenzulegen, erweiterte Privilegien zu erlangen oder beliebigen Code auszuführen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-40412US | critical9.8 | — | ||
Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-40411US | high8.8 | — | ||
Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-35430US | — | — | ||
Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-33843US | critical9.8OT elevated | — | ||
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-26147US | — | — | ||
Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network. | ||||
02
references
External citations — patches, advisories, analysis.
- Microsoft Security Advisory CVE-2026-26147 vom 2026-05-21external
- Microsoft Security Advisory CVE-2026-33843 vom 2026-05-21external
- Microsoft Security Advisory CVE-2026-35430 vom 2026-05-21external
- Microsoft Security Advisory CVE-2026-40411 vom 2026-05-21external
- Microsoft Security Advisory CVE-2026-40412 vom 2026-05-21external
- WID-SEC-W-2026-1649 - CSAF Versionself
- WID-SEC-2026-1649 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan