CVE-2026-85922

🗓️ 13 Oct 2026 19:01:09Reported by microsoftType

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2026-85922	13 Oct 202611:36	–	circl
Cvelist	CVE-2026-85922 Azure Key Vault Security Feature Bypass Vulnerability	13 Oct 202619:01	–	cvelist
EUVD	EUVD-2026-100126	13 Oct 202619:01	–	euvd
Microsoft CVE	Azure Key Vault Security Feature Bypass Vulnerability	13 Oct 202614:00	–	mscve
NCSC	Vulnerabilities in Microsoft Azure	13 Oct 202618:31	–	ncsc
NCSC	vulnerabilities present in Microsoft Office	13 Oct 202618:36	–	ncsc
NVD	CVE-2026-85922	13 Oct 202619:21	–	nvd
Positive Technologies	PT-2026-112856	13 Oct 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-85922 Azure Key Vault Security Feature Bypass Vulnerability	13 Oct 202619:01	–	vulnrichment

Vulners

CNA

Node

microsoft azure_security_keyvault_certificatesRange1.0.1–1.0.1

Node

microsoft azure_security_keyvault_keysRange1.0.1–1.0.1

Node

microsoft azure_security_keyvault_secretsRange1.0.1–1.0.1

Node

microsoft azure-keyvault-administrationRange4.7.1–4.7.1

Node

microsoft azure-keyvault-certificatesRange4.11.2–4.11.2

Node

microsoft azure-keyvault-keysRange4.11.2–4.11.2

Node

microsoft azure-keyvault-secretsRange4.11.2–4.11.2

Node

microsoft azure-keyvault-securitydomainRange1.0.0b3–1.0.0

[
  {
    "vendor": "Microsoft",
    "product": "azure_security_keyvault_certificates",
    "versions": [
      {
        "version": "1.0.1",
        "lessThan": "1.0.1",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "azure_security_keyvault_keys",
    "versions": [
      {
        "version": "1.0.1",
        "lessThan": "1.0.1",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "azure_security_keyvault_secrets",
    "versions": [
      {
        "version": "1.0.1",
        "lessThan": "1.0.1",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "azure-keyvault-administration",
    "versions": [
      {
        "version": "4.7.1",
        "lessThan": "4.7.1",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "azure-keyvault-certificates",
    "versions": [
      {
        "version": "4.11.2",
        "lessThan": "4.11.2",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "azure-keyvault-keys",
    "versions": [
      {
        "version": "4.11.2",
        "lessThan": "4.11.2",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "azure-keyvault-secrets",
    "versions": [
      {
        "version": "4.11.2",
        "lessThan": "4.11.2",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "azure-keyvault-securitydomain",
    "versions": [
      {
        "version": "1.0.0b3",
        "lessThan": "1.0.0b3",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85922

14 Oct 2026 04:18Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.4

SSVC

CWE-1390