NCSC-2026-0057

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Microsoft Azure

view advisory published 2026-02-10

Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten.

01

describes (10)

Related CVEs.

IDseverity exploitable
CVE-2026-23655US—OT elevated—
Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network.
CVE-2026-21531US—Exploit
Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.
CVE-2026-21529USmedium5.4—
Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network.
CVE-2026-21528US——
Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.
CVE-2026-21522US——
Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.
CVE-2026-21512US——
Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.
CVE-2026-21228US——
Improper certificate validation in Azure Local allows an unauthorized attacker to execute code over a network.
CVE-2026-24302UScritical9.8—
Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-24300US——
Azure Front Door Elevation of Privilege Vulnerability
CVE-2026-21532US——
Azure Function Information Disclosure Vulnerability
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan