CVE-2026-88094

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...

EUVD-2026-100265

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...

CVE-2026-88094

The Azure Storage Library is affected by a vulnerability involving the improper neutralization of special elements in output used by a downstream component (injection). This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been addressed by Microsoft;...

Azure Storage Library Elevation of Privilege Vulnerability

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...

PT-2026-112912

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...

KLA91335 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...

CVE-2026-66906

CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile path traversal Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-azure-storage-blob...

CVE-2026-60093

CVE-2026-60093 — camel-azure-storage-datalake downloadToFile path traversal Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-azure-storage-datalak...

python313-azure-storage-queue-12.18.0-1.1 on GA media (moderate)

python313-azure-storage-queue-12.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11944-1 Rating: moderate Cross-References: CVE-2022-30187 CVSS scores: CVE-2022-30187 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

PT-2026-105653

These are all security issues fixed in the python313-azure-storage-queue-12.18.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11944-1 python313-azure-storage-queue-12.18.0-1.1 on GA media

These are all security issues fixed in the python313-azure-storage-queue-12.18.0-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:4125-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4125-1 advisory. - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via...

azure-storage-azcopy-10.32.8-1.1 on GA media (moderate)

azure-storage-azcopy-10.32.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11740-1 Rating: moderate Cross-References: CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-84304 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-84304 SUSE : 8.7...

SUSE-SU-2026:4125-1 Security update for azure-storage-azcopy

This update for azure-storage-azcopy fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276733. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation...

Security update for azure-storage-azcopy

This update for azure-storage-azcopy fixes the following issues: CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276733. CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issu...

KLA91278 PE vulnerability in Microsoft Azure

Privilege escalation vulnerability was found in Microsoft Products Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-57104 Exploitation Related products Microsoft-Azure CVE list CVE-2026-57104 critical Solution Install necessary...

OPENSUSE-SU-2026:11740-1 azure-storage-azcopy-10.32.8-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.32.8-1.1 package on the GA media of openSUSE Tumbleweed...

Release Information for Veeam Plug-In for Microsoft Azure 9.1

Release Information 13.9.1.407 2026-09-08 Resolved issues General Storage account credentials are stored in plain text on worker appliances. Configuration Backup Configuration backup for the managed backup appliance fails after upgrading Veeam Backup & Replication to version 13.1. Under certain...

Path Traversal

Apache Camel Azure-Storage Datalake component is vulnerable to Path Traversal. The vulnerability is due to DataLakeFileOperations.downloadToFile joining the configured fileDir with an unvalidated remote path name, allowing an attacker to influence Data Lake file names and cause files to be create...

Path Traversal

Apache Camel is vulnerable to Path Traversal. The vulnerability is due to the Azure Storage Blob component constructing local file paths directly from attacker-influenced blob names without path normalization or containment checks, which allows an attacker to create or overwrite files outside the...