[SECURITY] Fedora 42 Update: rclone-1.72.1-1.fc42

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...

CVE-2026-24304: Improper Access Control

Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-24305

Azure Entra ID Elevation of Privilege Vulnerability...

CVE-2026-24306

Improper access control in Azure Front Door AFD allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-21227

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-21524

Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-21227

The CVE-2026-21227 entry describes a path traversal vulnerability in Azure Logic Apps: improper limitation of a pathname to a restricted directory that could allow an unauthenticated attacker to elevate privileges over a network. The root cause is stated as a pathname restriction flaw in Azure Lo...

CVE-2026-21227

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-21227 Azure Logic Apps Elevation of Privilege Vulnerability

...

CVE-2026-21227 Azure Logic Apps Elevation of Privilege Vulnerability

...

CVE-2026-24305 Azure Entra ID Elevation of Privilege Vulnerability

...

CVE-2026-24305 Azure Entra ID Elevation of Privilege Vulnerability

...

CVE-2026-24305

Azure Entra ID Elevation of Privilege Vulnerability...

CVE-2026-24305

CVE-2026-24305 maps to an Elevation of Privilege vulnerability in Azure Entra ID. Public disclosures in the connected sources indicate a high-impact issue with critical scores (NVD 9.8 overall; MS description 9.3) and a network/vector with no user interaction required. The exact vulnerable compon...

CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability

...

CVE-2026-21524

CVE-2026-21524 describes an information-disclosure vulnerability in Azure Data Explorer exposed to the network. Affected component is Azure Data Explorer’s data exposure path leading to unauthorized disclosure of information. Impact is Confidentiality High with network-based access and no require...

CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability

...

CVE-2026-21524

Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-24306

Improper access control in Azure Front Door AFD allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-24306

Azure Front Door (AFD) is identified as the affected product for CVE-2026-24306, described as an improper access control vulnerability that could allow an unauthenticated network attacker to elevate privileges. The connected sources corroborate the high-severity impact (CVSSv3.1: 9.8, Network, no...