837 matches found
CVE-2026-69857: Authorization Bypass Through User-Controlled Key
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network...
KLA91257 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability i...
PT-2026-85310
🚨 HIGH: CVE-2026-69857 CVSS 8.5 - Authorization bypass in Azure Cosmos DB allows authenticated attackers to perform spoofing over network. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/jpe1VOsLLc...
GHSA-7G4W-CG88-2CQ2
creationtimestamp| type| source ---|---|--- 2026-08-28 20:59:24+00:00| seen| https://bsky.app/profile/newssecia.bsky.social/post/3mu6ax42wfx2g 2026-08-28 22:00:41+00:00| seen| https://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html 2026-08-29 01:00:36+00:00| seen|...
MAL-2026-14305 Malicious code in mc-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e494af2871662b1b342a26141de010623484dfef353b505805f4b41d85d775c1 Package metadata describes mc-provider as 'Theta chain registry ⚛️' and the README is a verbatim copy of the hyperweb-io/chain-registry README...
Malicious code in mc-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e494af2871662b1b342a26141de010623484dfef353b505805f4b41d85d775c1 Package metadata describes mc-provider as 'Theta chain registry ⚛️' and the README is a verbatim copy of the hyperweb-io/chain-registry README...
GO-2026-6124 Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens in github.com/azukaar/cosmos-server
Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens in github.com/azukaar/cosmos-server...
GO-2026-6123 Cosmos-Server has an authentication bypass via forward-auth header smuggling on Constellation tunnel in github.com/azukaar/cosmos-server
Cosmos-Server has an authentication bypass via forward-auth header smuggling on Constellation tunnel in github.com/azukaar/cosmos-server...
CVE-2026-66803
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network...
CVE-2026-66803
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network...
EUVD-2026-51302
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network...
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability
...
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability
...
CVE-2026-66803
CVE-2026-66803 affects Azure Cosmos DB and is described as improper access control that allows an unauthorized attacker to execute code over a network. The connected records corroborate this as a remote code execution vulnerability, with a CVSSv3.1 base score of 10.0 (CRITICAL) and network attack...
Microsoft Fixes CosmosEscape Flaw That Could Allow Any Cosmos DB Takeover
Cybersecurity researchers at Wiz found CosmosEscape in Azure's Gremlin API, exposing a master key that could access any Cosmos DB account. Microsoft fixed it, with no customer impact found...
Azure Cosmos DB Remote Code Execution Vulnerability
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network...
Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service's Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz , which codenamed the chain CosmosEscape , said the exploit chain began with a...
KLA91184 ACE vulnerability in Microsoft Azure
A remote code execution vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2026-66803 Exploitation CVE list CVE-2026-66803 critical Solution Install necessary updates from the ...
PT-2026-66599
Name of the Vulnerable Software and Affected Versions Azure Cosmos DB affected versions not specified Description Improper access control allows an unauthorized attacker to execute code over a network. Recommendations At the moment, there is no information about a newer version that contains a fi...