DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Azure: Mehrere Schwachstellen
view advisory published 2026-08-06
Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure und Microsoft Entra ausnutzen, um beliebigen Code auszuführen oder erweiterte Berechtigungen zu erlangen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-68823US | — | — | ||
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-65668US | — | — | ||
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-62873US | — | — | ||
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-62830US | —OT elevated | — | ||
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-59115US | — | — | ||
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-56162US | — | — | ||
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-56161US | — | — | ||
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-50481US | — | — | ||
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-49163US | — | — | ||
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network. | ||||
02
references
External citations — patches, advisories, analysis.
- Microsoft Leitfaden für Sicherheitsupdatesexternal
- Microsoft Security Advisory CVE-2026-49163external
- Microsoft Security Advisory CVE-2026-50481external
- Microsoft Security Advisory CVE-2026-56161external
- Microsoft Security Advisory CVE-2026-56162external
- Microsoft Security Advisory CVE-2026-59115external
- Microsoft Security Advisory CVE-2026-62830external
- Microsoft Security Advisory CVE-2026-62873external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan