CVE-2026-19012

An authenticated denial of service affects Consul Community Edition and Consul Enterprise versions 1.18.0–2.0.2 via the Enterprise-to-Community downgrade path. A caller with config-entry write permission can submit a service-router configuration entry that causes the agent to exit unexpectedly, l...

Exploit for CVE-2026-64638

cve-id Donate Support the maintenance of this project wit...

Exploit for CVE-2026-64561

CVE-2026-64561 Donate Support the maintenance of this pro...

EUVD-2026-54313

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...

EUVD-2026-54319

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

EUVD-2026-54312

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

EUVD-2026-54318

Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...

EUVD-2026-54317

'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...

CVE-2026-68823

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

CVE-2026-59115

'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...

CVE-2026-56161

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

CVE-2026-50481

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-50515

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

CVE-2026-59115

'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...

CVE-2026-50481

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-62896

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

Azure Service Bus Remote Code Execution Vulnerability

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

Azure Confidential Ledger Remote Code Execution Vulnerability

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

Microsoft Teams Elevation of Privilege Vulnerability

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

CVE-2026-70615

boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorizedkeys file by supplying a percent-encoded newline character in the domain parameter...