15186 matches found
The vulnerability of the Azure Active Directory identity management and protection platform, related to deserialization mechanism flaws, allows attackers to trigger a service failure.
The vulnerability of the Azure Active Directory identity management and protection platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Azure Active Directory identity management and protection platform, related to the execution of a loop with an unavailable exit condition, allows a perpetrator to trigger a service failure.
The vulnerability of the Azure Active Directory identity management and protection platform is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
CVE-2026-66803
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network...
CVE-2026-66803
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network...
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability
...
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability
...
EUVD-2026-51302
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network...
CVE-2026-66803
CVE-2026-66803 affects Azure Cosmos DB and is described as improper access control that allows an unauthorized attacker to execute code over a network. The connected records corroborate this as a remote code execution vulnerability, with a CVSSv3.1 base score of 10.0 (CRITICAL) and network attack...
SUSE CVE-2026-24899
Fleet is open source device management software. Prior to version 4.82.0, a vulnerability in Fleet's Windows MDM enrollment flow allows authentication tokens from any Azure AD tenant to be accepted. Because Fleet validates JWT signatures using Microsoft's multi-tenant JWKS endpoint but does not...
SUSE CVE-2026-41185
When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...
SUSE CVE-2026-42602
azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in azureauthextension allows any party who holds a single valid Azure access token for any scope the collector's configured identity can mint for to authenticate to any...
SUSE CVE-2026-45796
Coder allows organizations to provision remote development environments via Terraform. Versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3 are vulnerable to unauthenticated semi-blind Server-Side Request Forgery SSRF via the Azure instance identity endpoint POST...
SUSE CVE-2026-46354
Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, azureidentity.Validate verifies that the PKCS7 signer certificate chains to a trusted Azure CA but never verifies the PKCS7 signature...
Azure Cosmos DB Remote Code Execution Vulnerability
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network...
Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service's Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz , which codenamed the chain CosmosEscape , said the exploit chain began with a...
CosmosEscape: Taking Over Every Database in Azure Cosmos DB
A critical vulnerability chain in Azure Cosmos DB enabled full read and write access to every Cosmos DB database...
CLEANSTART-2026-OA40644 Security fixes in az 2.83.0-r1
Package az version 2.83.0-r1 fixes 4 vulnerabilities: CVE-2026-44432, CVE-2026-44431, CVE-2026-39892, CVE-2026-45409...
CLEANSTART-2026-PY48684 Security fixes in az 2.83.0-r0
Package az version 2.83.0-r0 fixes 1 vulnerabilities: CVE-2026-4539...
CLEANSTART-2026-RZ36238 Security fixes in azure-functions-node 4.1052.200-r0
Package azure-functions-node version 4.1052.200-r0 fixes 22 vulnerabilities: CVE-2026-41907, CVE-2026-48068, CVE-2026-48069, CVE-2024-37168, CVE-2024-4068...