CVE-2026-26121 Azure IOT Explorer Spoofing Vulnerability

...

CVE-2026-26121 Azure IOT Explorer Spoofing Vulnerability

...

CVE-2026-26121

CVE-2026-26121 describes a server-side request forgery (SSRF) in Azure IoT Explorer that could allow an unauthorized attacker to perform spoofing over a network. The vulnerability affects components listed in Azure IoT Explorer exposure and is associated with elevated risk as indicated by CVSS de...

CVE-2026-23664 Azure IoT Explorer Information Disclosure Vulnerability

...

CVE-2026-23664 Azure IoT Explorer Information Disclosure Vulnerability

...

CVE-2026-23664

Azure IoT Explorer Information Disclosure (CVE-2026-23664) is due to improper restriction of the communication channel to intended endpoints, enabling a network-accessible attacker to disclose sensitive data. Affected product/component: Azure IoT Explorer (Azure IoT Explorer vulnerabilities have ...

CVE-2026-23660 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

...

CVE-2026-23660

CVE-2026-23660 concerns Windows Admin Center in the Azure Portal with an Elevation of Privilege vulnerability. Attack vector is local, requiring LOW privileges with no user interaction, and the impact is HIGH on confidentiality, integrity, and availability. The base score is 7.8 (CVSS 3.1). The e...

CVE-2026-23660 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

...

2026-03 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5078737)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

2026-03 Cumulative Update for Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5078766)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

March 10, 2026—KB5078774 (Monthly Rollup)

None None...

KB5077473 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: March 10, 2026

None None...

March 10, 2026—KB5078775 (Monthly Rollup)

None None...

Azure MCP Server Tools Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure MCP Server allows an authorized attacker to elevate privileges over a network...

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally...

Azure IoT Explorer Information Disclosure Vulnerability

Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...

Azure IOT Explorer Spoofing Vulnerability

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...