EUVD-2026-70795

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-70793

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-70796

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network...

CVE-2026-83711

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70352

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69857

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network...

CVE-2026-69857

Azure Cosmos DB is affected by an authorization bypass through user-controlled key , allowing an authorized attacker to perform spoofing over a network. The vulnerability is rated CVSS 3.1: 8.5 (HIGH) with a vector of CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a changed scope and hi...

CVE-2026-69857 Azure Cosmos DB Spoofing Vulnerability

...

CVE-2026-69857 Azure Cosmos DB Spoofing Vulnerability

...

CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

...

CVE-2026-83711

Microsoft Azure Active Directory B2C is affected by an authorization bypass vulnerability caused by a user-controlled key, enabling an unauthorized attacker to elevate privileges over the network. The vulnerability is rated CVSS 3.1 10.0 (Critical) with no privileges required , no user interactio...

CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

...

CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability

...

CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability

...

CVE-2026-70352

Azure AI Language is affected by a missing authentication vulnerability in a critical function, allowing an unauthorized attacker to elevate privileges over a network . The vulnerability is rated CVSS 10.0 (CRITICAL) with low complexity, no privileges required, no user interaction, and changed sc...

AzureHound v3.1.1-rc1

AzureHound The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling release contains pre-built binaries that are automatically kept up-to-date with the main branch and...

CVE-2026-70352: Missing Authentication for Critical Function

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69857: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network...

CVE-2026-83711: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

PT-2026-85310

🚨 HIGH: CVE-2026-69857 CVSS 8.5 - Authorization bypass in Azure Cosmos DB allows authenticated attackers to perform spoofing over network. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/jpe1VOsLLc...