CERTFR-2026-AVI-1315

vendorFRcertfr

FrançaisShown in its original language — a full translation is planned for a future version.

Multiples vulnérabilités dans Microsoft Azure

view advisory published 2026-10-14

A published security advisory; the vulnerabilities below are the ones it describes.

01

describes (8)

Related CVEs.

IDseverity exploitable
CVE-2026-96204USmedium6.5—
Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.
CVE-2026-88132USmedium5.9—
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
CVE-2026-88094UShigh8.1—
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over…
CVE-2026-85925UShigh8.2—
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
CVE-2026-85922UShigh7.4—
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-85891UShigh7.5—
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
CVE-2026-69877USmedium6.5—
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
CVE-2026-100207UShigh7.3—
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan