34 matches found
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889 , carries a CVSS score of 10.0. "Missing authentication for critical function...
EUVD-2026-82594
Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-82593
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-85889
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-85917
Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-85917
A server-side request forgery (SSRF) vulnerability in Azure AI Foundry allows an unauthorized, network-based attacker to elevate privileges. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating no privileges required, low complexity, and a high confide...
CVE-2026-85889
Azure AI Foundry is affected by a missing authentication vulnerability in a critical function, allowing an unauthenticated attacker to elevate privileges over a network. The flaw is rated CRITICAL (CVSS 3.1: 10.0) with a vector of network-based, low complexity, no privileges required, no user int...
Azure AI Foundry Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
Azure AI Foundry Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-85889: Missing Authentication for Critical Function
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-85917: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
The vulnerability of the Azure AI Foundry platform, which is related to access control deficiencies, allows attackers to escalate their privileges. This makes it possible for unauthorized individuals to manipulate the platform’s development, deployment, and management of artificial intelligence-based solutions.
The vulnerability of the Azure AI Foundry platform, which is used for developing, deploying, and managing artificial intelligence solutions, relates to access control errors. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
CVE-2026-35435
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-28454
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-35435
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-35435
CVE-2026-35435 relates to Azure AI Foundry M365 published agents, where improper access control allows an unauthenticated network attacker to elevate privileges within the targeted network. The available sources (NVD, Microsoft MSRC, and related feeds) describe the vulnerability andImpact as Elev...
CVE-2026-35435 Azure AI Foundry Elevation of Privilege Vulnerability
...
CVE-2026-35435 Azure AI Foundry Elevation of Privilege Vulnerability
...
