CVE-2026-33105

CVE-2026-33105 affects Microsoft Azure Kubernetes Service. The vulnerability is described as improper authorization that could allow an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 vector indicates network access, low attack complexity, no user interaction, and a CRITI...

CVE-2026-33105

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-33105 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2026-26135

Server-side request forgery ssrf in Azure Custom Locations Resource Provider RP allows an authorized attacker to elevate privileges over a network...

CVE-2026-26135

CVE-2026-26135 describes a server-side request forgery (SSRF) in the Azure Custom Locations Resource Provider (RP) that enables an authorized attacker to elevate privileges over the network. The NVD entries corroborate an elevation-of-privilege impact with high confidentiality and integrity impli...

CVE-2026-26135 Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability

...

CVE-2026-26135 Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability

...

CVE-2026-33107 Azure Databricks Elevation of Privilege Vulnerability

...

CVE-2026-33107 Azure Databricks Elevation of Privilege Vulnerability

...

CVE-2026-33107

Azure Databricks is affected by a server-side request forgery (SSRF) that, per the sources, allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 base score is 10.0 (CRITICAL) with network access, low attack complexity, and no user interaction required; confidentialit...

CVE-2026-32213

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-32213 Azure AI Foundry Elevation of Privilege Vulnerability

...

CVE-2026-32213 Azure AI Foundry Elevation of Privilege Vulnerability

...

CVE-2026-32213

Technical details (affected products, versions, root cause, fixes) are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain concrete impact and remediation information.

CVE-2026-34750

Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/storage-azure, @payloadcms/storage-gcs, @payloadcms/storage-r2, and @payloadcms/storage-s3, the client-upload signed-URL endpoints for S3, GCS, Azure, and R2 did not properly sanitize...

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Custom Locations Resource Provider RP allows an authorized attacker to elevate privileges over a network...

Azure SRE Agent Information Disclosure Vulnerability

Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network...

Azure AI Foundry Elevation of Privilege Vulnerability

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

Azure Databricks Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Databricks allows an unauthorized attacker to elevate privileges over a network...