CVE-2025-1242

CVE-2025-1242: Exposure of Administrative IoT Hub Credentials Advisory Field| Value ---|--- CVE| CVE-2025-1242 ICSA| ICSA-26-055-03 CVSS 3.1| 9.1 Critical Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-798 Use of Hard-coded Credentials Researcher| Michael Groberman — Gr0m Published...

CVE-2026-13768

CVE-2026-13768 - Gardyn IoT Hub Owner Key Exposure !WARNING This repository contains a fully functional proof-of-concept for a high-severity IoT vulnerability. This code is provided strictly for educational purposes, authorized security research, and defensive testing. Unauthorized use is illegal...

Azure IoT Central Privilege Escalation

The vulnerability of the Azure IoT Central data management platform is related to the exposure of information. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

CVE-2026-21515 Azure IoT Central Elevation of Privilege Vulnerability

...

CVE-2026-21515

Technical details of CVE-2026-21515 are not publicly available in the provided documents. Monitor for updates from MSRC/NVD; no specifics on affected components, root cause, or fixes are included.

CVE-2026-21515: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network...

Microsoft Azure IOT Central information leakage vulnerability

Microsoft Azure IoT Central is an IoT application platform provided by Microsoft Corporation, which offers capabilities for device connection, management, and data analysis. There is a vulnerability in Microsoft Azure IoT Central, where sensitive information has been leaked to unauthorized actors...

Exploit for CVE-2025-1242

CERT/CC VU653116 | CISA Advisory ICSA-26-055-03https:/...

CVE-2026-23664

Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-23662

Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-23661

Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-26121

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...

Azure IoT Explorer Spoofing

The vulnerability of the Azure IoT Explorer software is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to carry out spoofing attacks remotely...

Azure IoT Explorer Plaintext Disclosure

The vulnerability of the Azure IoT Explorer software is related to the transmission of critical information in open text format. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

EUVD-2026-10690

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-26121

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-26121

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-23661

Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-23662

Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-23661

Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...