CVE-2026-42823

Azure Logic Apps is affected by CVE-2026-42823 due to improper access control that may allow an authorized attacker to elevate privileges over a network. The CVSS 3.1 metrics indicate a CRITICAL score (9.9) with network attack vector, low complexity, and privileges required, and impacts to confid...

CVE-2026-42823

Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...

CVE-2026-42823 Azure Logic Apps Elevation of Privilege Vulnerability

...

CVE-2026-42823

creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:04+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0142 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...