15173 matches found
CVE-2026-68870 Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...
PT-2026-69896
Name of the Vulnerable Software and Affected Versions apache-airflow-providers-microsoft-azure versions prior to 14.1.0 Description The Azure Key Vault secrets backend in the Microsoft Azure provider resolves a team-scoped Connection or Variable id using a team-agnostic lookup if the initial...
CVE-2026-68870: Authorization Bypass Through User-Controlled Key
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...
SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:3528-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3528-1 advisory. Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded...
Security update for azure-storage-azcopy
This update for azure-storage-azcopy fixes the following issues: Update to 10.32.6. Security issues fixed: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266657. CVE-2026-56852:...
SUSE-SU-2026:3528-1 Security update for azure-storage-azcopy
This update for azure-storage-azcopy fixes the following issues: Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266657. - CVE-2026-56852:...
monkey365 v0.99
Monkey365 is an open-source security assessment framework for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals, consultants, administrators, and incident responders identify misconfigurations, review cloud security posture, and evaluate environments against industry...
EUVD-2026-54319
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...
EUVD-2026-54323
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-54315
Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
EUVD-2026-54324
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...
EUVD-2026-54311
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-54321
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...
EUVD-2026-54320
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...
CVE-2026-68823
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...
CVE-2026-62830
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...
CVE-2026-62836
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-50515
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...