PT-2026-32837

CVE-2026-32171 Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network. https://t.co/kY4zlAhYAl...

KB5082142: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (April 2026)

The remote Windows host is missing security update 5082142. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...

PT-2026-32836

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description Improper input validation allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that contains a...

Microsoft Azure Monitor Agent code-related vulnerabilities

Microsoft Azure Monitor Agent is a monitoring agent program from Microsoft USA. A security vulnerability exists in Microsoft Azure Monitor Agent. An attacker can exploit the vulnerability to elevate privileges...

Microsoft Azure Monitor Agent < 1.41.0 Elevation of Privilege (CVE-2026-32192)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.41.0. It is, therefore, affected by an elevation of privilege vulnerability: - An elevation of privilege vulnerability exists in Azure Monitor Agent that allows an authorized attacker to elevate privileges...

Microsoft Azure Monitor Agent has a vulnerability related to input validation errors.

Microsoft Azure Monitor Agent is a monitoring agent program from Microsoft USA. A security vulnerability exists in Microsoft Azure Monitor Agent. An attacker can exploit the vulnerability to elevate privileges...

Microsoft Azure Logic Apps security vulnerabilities

Microsoft Azure Logic Apps is a low-code automation platform developed by the American company Microsoft. There are security vulnerabilities in Microsoft Azure Logic Apps. Attackers can exploit these vulnerabilities to gain higher privileges...

CVE-2026-32171: Insufficiently Protected Credentials

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2025-6965)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-6965 advisory. - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate ter...

Ubuntu: Security Advisory (USN-8148-6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-8149-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-32846

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-32168: Improper Input Validation

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

CVE-2026-32192: Deserialization of Untrusted Data

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

KLA90984 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent can be...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubescape-operator, dex, tailscale, knative-eventing, tetragon, mcp-grafana, crossplane-provider-family-azure, kine, rancher-fleet, sftpgo-plugin-auth, envoy-ratelimit, yunikorn-k8shim, promxy, aws-efs-csi-driver, kubernetes-csi-external-attacher,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kind, knative-eventing, aws-network-policy-agent, kubernetes-csi-external-attacher, crossplane-provider-keycloak, libnvidia-container, certificate-transparency, cloud-provider-azure, influx, syft, helm, metrics-agent, victoriametrics, pulumi-language-java, kubeflow,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, cert-manager-csi-driver-fips, apache-beam-python-3.11-sdk, podman-fips, k8ssandra-client-fips, opencost, prometheus-podman-exporter-fips, apache-beam-python-3.12-sdk, sftpgo-plugin-eventsearch, prometheus-process-exporter-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, cert-manager-csi-driver-fips, podman-fips, terraform-provider-time, k8ssandra-client-fips, opencost, prometheus-podman-exporter-fips, sftpgo-plugin-eventsearch, thanos-receive-controller-fips, prometheus-process-exporter-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: podman-fips, prometheus-podman-exporter-fips, age-fips, rke2-runtime-fips, crossplane-provider-aws-backup, harbor-registry-fips, knative-storage-migrate-fips, istio, kube-conformance, elastic-agent-fips, logstash-exporter, rook-fips, gostatsd,...