16146 matches found
CVE-2026-33844
Azure Managed Instance for Apache Cassandra is affected by a vulnerability described as improper input validation that enables an authorized attacker to perform remote code execution over the network. The CVSS v3.1 base score is 9.0 (CRITICAL) with network attack, low complexity, required privile...
CVE-2026-33844 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-32207
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-32207 Azure Machine Learning Notebook Spoofing Vulnerability
...
CVE-2026-32207
CVE-2026-32207 concerns an XSS vulnerability in Azure Machine Learning Notebook/Notebook UI where improper neutralization of input during web page generation enables an unauthenticated attacker to spoof content over the network. Underlying cause: improper sanitization of user-controlled input in ...
CVE-2026-32207 Azure Machine Learning Notebook Spoofing Vulnerability
...
CVE-2026-33109 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-33109
CVE-2026-33109 affects Azure Managed Instance for Apache Cassandra. The vulnerability is described as improper access control that allows an authenticated, network-adjacent attacker to execute code on the instance. The CVSS 3.1 base score is 9.9 (CRITICAL) with NETWORK attack vector, LOW attack c...
CVE-2026-33109
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
CVE-2026-33109 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-41105
CVE-2026-41105 affects the Azure Monitor Action Group Notification System. The issue is described as a server-side request forgery (SSRF) that allows an authorized attacker to elevate privileges over a network. Documented impact is an Elevation of Privilege (EoP) with high risk (CVSS 3.1: 8.1). C...
CVE-2026-41105 Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
...
CVE-2026-41105 Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
...
CVE-2026-41105
Server-side request forgery ssrf in Azure Notification Service allows an authorized attacker to elevate privileges over a network...
GHSA-GR3R-CRP5-QRRM Compromised tag of intercom-php published via GitHub
Impact On April 30, 2026, a malicious commit was pushed to the intercom/intercom-php repository and tagged as version 5.0.2, using a compromised service account github-management-service. This occurred as part of the same supply chain attack that affected intercom-client on npm. The malicious...
Azure AI Foundry Elevation of Privilege Vulnerability
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
Azure Entra ID Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network...
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure Notification Service allows an authorized attacker to elevate privileges over a network...