PT-2026-68831

Name of the Vulnerable Software and Affected Versions Azure SRE Agent affected versions not specified Description Missing authorization in the agent allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version tha...

PT-2026-68826

Name of the Vulnerable Software and Affected Versions Azure Service Bus affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an object, which...

PT-2026-68828

Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a...

azure-storage-azcopy-10.32.6-1.1 on GA media (moderate)

azure-storage-azcopy-10.32.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11444-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6...

CVE-2026-50515: Deserialization of Untrusted Data

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

CVE-2026-62830: Missing Authorization

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-68823: Exposed Dangerous Method or Function

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

PT-2026-68832

Name of the Vulnerable Software and Affected Versions Azure SQL Managed Instance affected versions not specified Description Improper restriction of the communication channel to intended endpoints allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment,...

KLA91190 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

CVE-2026-56162: Improper Authentication

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

PT-2026-68839

Name of the Vulnerable Software and Affected Versions Azure Confidential Ledger affected versions not specified Description An exposed dangerous method or function allows an authorized attacker to execute code over a network. Recommendations At the moment, there is no information about a newer...

PT-2026-68827

Name of the Vulnerable Software and Affected Versions Azure Logic Apps affected versions not specified Description Improper access control allows an authorized attacker to disclose information over a network. Recommendations At the moment, there is no information about a newer version that contai...

CVE-2026-62836: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50481: Modification of Assumed-Immutable Data (MAID)

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

PT-2026-68825

Name of the Vulnerable Software and Affected Versions Azure Active Directory affected versions not specified Description An authorized attacker can elevate privileges over a network by modifying assumed-immutable data maid within Azure Active Directory. Assumed-immutable data refers to attributes...

KLA91193 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Service Bus can be exploited...

CVE-2026-56161: Improper Access Control

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

Malicious code in matlab-azure-devops-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc42778bb54bfdea5784d5dcb68cf43c89def3dbaeddba1d1a6bd2850cb174b The package's preinstall script node index.js auto-executes on npm install and collects host identifiers os.hostname, os.userInfo.username, home...

ROOT-APP-PYPI-CVE-2026-21226 CVE-2026-21226 in azure-core - Patched by Root

Root has patched CVE-2026-21226 in the azure-core package for Root:PyPI. Multiple fixed versions available...

MAL-2026-11885 Malicious code in @servicetitan/lazy-module (npm)

npm/@servicetitan/lazy-module is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...