CVE-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability

...

February 10, 2026—KB5075971 (Monthly Rollup)

None None...

February 10, 2026—Hotpatch KB5075942 (OS Build 26100.32313)

None None...

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

Azure HDInsight Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Azure HDInsights allows an authorized attacker to perform spoofing over a network...

Azure IoT Explorer Information Disclosure Vulnerability

Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

Azure Local Remote Code Execution Vulnerability

Improper certificate validation in Azure Local allows an unauthorized attacker to execute code over a network...

Azure SDK for Python Remote Code Execution Vulnerability

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

February 10, 2026—KB5075970 (Monthly Rollup)

None None...

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

Azure DevOps Server Cross-Site Scripting Vulnerability

Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: gitlab-kas, sftpgo-plugin-auth, knative-serving, nats-top, terraform-docs, kubernetes-csi-external-snapshotter, openfga, kubo, bazelisk, cilium-certgen, crossplane-provider-aws-iam, tempo, aws-privateca-issuer, kube-rbac-proxy, clickhouse-operator,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: cni-plugins, gitlab-kas, gofumpt, sftpgo-plugin-auth, knative-serving, docker, nats-top, terraform-docs, kubernetes-csi-external-snapshotter, openfga, cilium-certgen, bazelisk, hello-world-golang, crossplane-provider-aws-iam, kubo, tempo, aws-privateca-issuer,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, azure-service-operator-fips, wait-for-port, dex-fips, aws-efs-csi-driver-fips, knative-eventing-fips, vault-fips, nri-apache, regclient, db-operator, kafka-proxy, nri-haproxy, blob-csi-fips, cert-manager-webhook-pdns,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, azure-service-operator-fips, dex-fips, aws-efs-csi-driver-fips, knative-eventing-fips, vault-fips, nri-apache, regclient, db-operator, kafka-proxy, nri-haproxy, blob-csi-fips, cert-manager-webhook-pdns, crossplane-provider-aws-kinesis,...

Microsoft Azure Compute Gallery 安全漏洞

Microsoft Azure Compute Gallery is a service provided by Microsoft in the United States that manages virtual machines. There are security vulnerabilities in Microsoft Azure Compute Gallery. Attackers can exploit these vulnerabilities to obtain sensitive information...

PT-2026-7409

Name of the Vulnerable Software and Affected Versions Azure IoT SDK affected versions not specified Description An issue exists where binding to an unrestricted IP address in the Azure IoT SDK can allow an unauthorized attacker to disclose information over a network. Recommendations At the moment...

Microsoft Azure IoT 安全漏洞

Microsoft Azure IoT is a central hosting service provided by the American company Microsoft. It is used for bidirectional communication between IoT applications and the devices they manage. There are security vulnerabilities in Microsoft Azure IoT. Attackers can exploit these vulnerabilities to...

Microsoft Azure DevOps Server 代码问题漏洞

Microsoft Azure DevOps Server is a software development collaboration tool provided by the American company Microsoft. This product includes features such as shared code, work tracking, and software release management. There are code-related vulnerabilities in Microsoft Azure DevOps Server...

Microsoft Azure HDInsight 跨站脚本漏洞

Microsoft Azure HDInsight is a hosted cluster platform provided by Microsoft Corporation, offering managed, full-spectrum, open-source cloud analysis services for businesses. Microsoft Azure HDInsight has a cross-site scripting vulnerability. Attackers utilize this vulnerability to carry out...