CVE-2026-21522

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

CVE-2026-21512

Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...

CVE-2026-21512

Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...

CVE-2026-21228

Improper certificate validation in Azure Local allows an unauthorized attacker to execute code over a network...

CVE-2026-21228

Improper certificate validation in Azure Local allows an unauthorized attacker to execute code over a network...

2026-02 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5075943)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

2026-02 Cumulative Update for Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5075906)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

CVE-2026-21228 Azure Local Remote Code Execution Vulnerability

...

CVE-2026-21228

CVE-2026-21228 affects Azure Local and is due to improper certificate validation. The TALOS update describes an attacker intercepting unsecured communication between the configurator and target systems, tampering responses to trigger command injection with administrative privileges and potentiall...

CVE-2026-21228 Azure Local Remote Code Execution Vulnerability

...

CVE-2026-21529

Improper neutralization of input during web page generation 'cross-site scripting' in Azure HDInsights allows an authorized attacker to perform spoofing over a network...

CVE-2026-21529 Azure HDInsight Spoofing Vulnerability

...

CVE-2026-21529

CVE-2026-21529 involves an improper neutralization of input during web page generation (cross-site scripting) in Azure HDInsight. The issue allows an authorized attacker to perform network-based spoofing by exploiting insufficient input handling during page creation. The vulnerability affects the...

CVE-2026-21529 Azure HDInsight Spoofing Vulnerability

...

CVE-2026-21531

CVE-2026-21531 involves deserialization of untrusted data in the Azure SDK, allowing remote code execution over a network. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields a base score of 9.8 (CRITICAL). The impact is high on confidentiality, integrity, and availability, with netw...

CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

CVE-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability

...

CVE-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability

...

CVE-2026-21528 Azure IoT Explorer Information Disclosure Vulnerability

...

CVE-2026-21528

CVE-2026-21528 affects the Azure IoT SDK with binding to an unrestricted IP address, enabling an unauthorized attacker to disclose information over a network. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) yields a base score of 6.5 (Medium). Affected component is the Azure IoT SDK; t...