NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Microsoft Azure
view advisory published 2026-10-13
Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten, zoals Key Vault, DevOps, API center en Storage.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-96204US | medium6.5 | — | ||
Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-88132US | medium5.9 | — | ||
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-88094US | high8.1 | — | ||
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over… | ||||
| CVE-2026-85925US | high8.2 | — | ||
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-85922US | high7.4 | — | ||
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-69877US | medium6.5 | — | ||
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-100207US | high7.3 | — | ||
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally. | ||||
| CVE-2026-96207US | critical10.0 | — | ||
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-83947US | medium6.5OT elevated | — | ||
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2026-83943US | high8.7 | — | ||
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-69435US | high8.1 | — | ||
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-96205US | — | — | ||
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan