KLA91263 Multiple vulnerabilities in Microsoft Azure

🗓️ 08 Sep 2026 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 13 Views

Multiple Microsoft Azure vulnerabilities allow privilege escalation, RCE, disclosure, and spoofing.

Reporter	Title	Published	Views	Family All 125
Tenable Nessus	Security Updates for Azure CycleCloud < 8.9.2 (August 2026)	14 Aug 202600:00	–	nessus
Tenable Nessus	Security Updates for Azure CLI (September 2026)	11 Sep 202600:00	–	nessus
BDU FSTEC	The vulnerability of the compatibility package for Microsoft Azure Entra ID, related to the absence of authentication, allows a perpetrator to escalate their privileges.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service allows attackers to bypass authentication by using a user-controlled key, enabling them to escalate their privileges.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the compatibility package for Microsoft Azure Entra ID allows a perpetrator to circumvent the authentication process by using an alternative path or channel, thereby allowing them to increase their privileges.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure AI Language Authoring service lies in the lack of authentication for critical functions, allowing attackers to escalate their privileges.	14 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Cosmos DB database management system, related to bypassing authentication using a user-controlled key, allows attackers to perform spear-phishing attacks.	14 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Discovery Studio’s research environment arises from the improper elimination of special elements in data queries, allowing an intruder to disclose protected information.	14 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Authentication Library (MSAL), related to the possibility of bypassing the authentication process, allows attackers to perform spear-phishing attacks.	18 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Command Line Interface (CLI) of the Microsoft Azure platform, which allows a hacker to execute arbitrary code.	28 Sep 202600:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62895
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62906
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62916
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69854
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69857
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70352
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77909
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81349
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83711
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83941

16 Sep 2026 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS 3.19.8 - 10

EPSS0.01008

SSVC

Microsoft Azure privilege escalation remote code execution information disclosure spoofing Entra ID Azure CLI