13474 matches found
CVE-2026-25219
CVE-2026-25219 affects Apache Airflow. The vulnerability arises because the access_key and connection_string fields were not marked as sensitive in secrets masker, enabling users with read access to view these values in the UI and potentially in logs. The documented remediation is to upgrade Airf...
PT-2026-33058
Name of the Vulnerable Software and Affected Versions Airflow versions prior to 3.1.8 Description The secrets masker failed to mark the access key and connection string connection properties as sensitive. This allows users with read permissions to view these values in the Connection UI...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit these vulnerabilities by having multiple Azure and Microsoft components fail to validate input adequately or process untrusted data insecurely, allowing an authorized attacker to increase privileges...
EUVD-2026-22560
Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...
EUVD-2026-22559
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
EUVD-2026-22573
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-32192
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-32168
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-32171
Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...
2026-04 Cumulative Update for Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5082142)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
CVE-2026-32171 Azure Logic Apps Elevation of Privilege Vulnerability
...
CVE-2026-32171
CVE-2026-32171—Azure Logic Apps Elevation of Privilege is confirmed with a high-severity impact (CVSS v3.1 base 8.8) due to insufficiently protected credentials that allow an authorized attacker to obtain elevated privileges over the network. Affected product: Azure Logic Apps. Root cause: insuff...
CVE-2026-32171 Azure Logic Apps Elevation of Privilege Vulnerability
...
CVE-2026-32171
Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...
CVE-2026-32192 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2026-32192 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2026-32192
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-32192
Azure Monitor Agent is affected by a Deserialization of untrusted data vulnerability (CVE-2026-32192) that allows an authorized attacker to elevate privileges locally. Public sources describe the issue as an elevation of privilege in Azure Monitor Agent, linked to improper input validation during...