CVE-2026-26135 Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability

...

CVE-2026-33107 Azure Databricks Elevation of Privilege Vulnerability

...

CVE-2026-33107 Azure Databricks Elevation of Privilege Vulnerability

...

CVE-2026-33107

Azure Databricks is affected by a server-side request forgery (SSRF) that, per the sources, allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 base score is 10.0 (CRITICAL) with network access, low attack complexity, and no user interaction required; confidentialit...

CVE-2026-32213 Azure AI Foundry Elevation of Privilege Vulnerability

...

CVE-2026-32213

Technical details (affected products, versions, root cause, fixes) are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain concrete impact and remediation information.

CVE-2026-32213

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-32213 Azure AI Foundry Elevation of Privilege Vulnerability

...

CVE-2026-34750

Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/storage-azure, @payloadcms/storage-gcs, @payloadcms/storage-r2, and @payloadcms/storage-s3, the client-upload signed-URL endpoints for S3, GCS, Azure, and R2 did not properly sanitize...

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

Azure AI Foundry Elevation of Privilege Vulnerability

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

Azure Databricks Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Databricks allows an unauthorized attacker to elevate privileges over a network...

Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Custom Locations Resource Provider RP allows an authorized attacker to elevate privileges over a network...

Azure SRE Agent Information Disclosure Vulnerability

Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network...

PT-2026-29904

Name of the Vulnerable Software and Affected Versions Azure Web Apps affected versions not specified Description An issue exists in Azure MCP Server where missing authentication for a critical function allows an unauthorized attacker to disclose information over a network. Recommendations At the...

PT-2026-29906

Name of the Vulnerable Software and Affected Versions Microsoft Azure Kubernetes Service affected versions not specified Description Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network. The flaw allows unauthenticated...

PT-2026-29905

Name of the Vulnerable Software and Affected Versions Azure AI Foundry affected versions not specified Description Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer...

PT-2026-29902

Server-side request forgery ssrf in Azure Custom Locations Resource Provider RP allows an authorized attacker to elevate privileges over a network...

Microsoft Azure MCP Server Access Control Vulnerability

Microsoft Azure MCP Server is a core server component developed by Microsoft Corporation in the United States, used for managing and coordinating services and resources on the Azure cloud platform. There is an access control vulnerability in Microsoft Azure MCP Server; this vulnerability stems fr...

Microsoft Azure Kubernetes Service Authorization Vulnerability

Microsoft Azure Kubernetes Service is a service provided by the American company Microsoft for deploying, managing, and scaling containerized applications. There is an authorization issue vulnerability in Microsoft Azure Kubernetes Service. This vulnerability stems from improper authorization,...