16192 matches found
CVE-2026-26118
Server-side request forgery ssrf in Azure MCP Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2026-26117
CVE-2026-26117 concerns Arc Enabled Servers running the Azure Connected Machine Agent. The vulnerability is an Elevation of Privilege issue affecting the Azure Arc-enabled machine agent on Arc-enabled servers. According to the CVSS data, it is a local, low-complexity attack requiring LOW privileg...
CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2026-26117
Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-23662
Azure IoT Explorer contains an information disclosure vulnerability CVE-2026-23662. The CVSSv3.1 base score is 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no privileges required, and no user interaction. The impact is Confidentiality: High; Integrity/Availability: None. Exploit ...
CVE-2026-23662 Azure IoT Explorer Information Disclosure Vulnerability
...
CVE-2026-23665
Technical details and affected product/version are not provided in the supplied documents; monitor for updates from official sources.
CVE-2026-23665 Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability
...
CVE-2026-23662 Azure IoT Explorer Information Disclosure Vulnerability
...
CVE-2026-23665 Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability
...
CVE-2026-23661 Azure IoT Explorer Information Disclosure Vulnerability
...
CVE-2026-23661 Azure IoT Explorer Information Disclosure Vulnerability
...
CVE-2026-23661
CVE-2026-23661 : Affected software is Azure IoT Explorer. The vulnerability is a cleartext transmission of sensitive information over the network, enabling an unauthorized attacker to disclose data. Root cause described in the sources is exposure of sensitive data through unencrypted transmission...
CVE-2026-26148 Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability
...
CVE-2026-26148
The CVE-2026-26148 issue affects the Microsoft Azure AD SSH Login extension for Linux, causing elevation of privilege. According to the provided metrics, the vulnerability is a LOCAL, high-severity flaw (CVSS 3.1: 8.1) with no required user interaction and no privileges required. The attack compl...
CVE-2026-26148 Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability
...
CVE-2026-26148
External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...