CVE-2026-23664

Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-23662

Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-23661

Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-26121

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user, grant themselves elevated privileges or gain access to sensitive data. Azure Entra ID: |----------------|------|-------------------------------------| ...

EUVD-2026-10690

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-26121

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-26121

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-23664

Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-23664

Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-23661

Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-23662

Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-23661

Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-23662

Azure IoT Explorer contains an information disclosure vulnerability CVE-2026-23662. The CVSSv3.1 base score is 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no privileges required, and no user interaction. The impact is Confidentiality: High; Integrity/Availability: None. Exploit ...

CVE-2026-23661 Azure IoT Explorer Information Disclosure Vulnerability

...

CVE-2026-23661

CVE-2026-23661 : Affected software is Azure IoT Explorer. The vulnerability is a cleartext transmission of sensitive information over the network, enabling an unauthorized attacker to disclose data. Root cause described in the sources is exposure of sensitive data through unencrypted transmission...

CVE-2026-26121 Azure IOT Explorer Spoofing Vulnerability

...

CVE-2026-26121

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-23664

Azure IoT Explorer Information Disclosure (CVE-2026-23664) is due to improper restriction of the communication channel to intended endpoints, enabling a network-accessible attacker to disclose sensitive data. Affected product/component: Azure IoT Explorer (Azure IoT Explorer vulnerabilities have ...

Azure IOT Explorer Spoofing Vulnerability

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...