CVE-2026-77556: Out-of-bounds Read

A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-95862: Out-of-bounds Write

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

EUVD-2026-82596

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70200

Azure Logic Apps is affected by a path traversal vulnerability (improper limitation of a pathname to a restricted directory) that allows an unauthorized attacker to elevate privileges over a network. The CNA-assigned CVSS 3.1 score is 10.0 (Critical) , reflecting a network-based attack with low c...

CVE-2026-85889: Missing Authentication for Critical Function

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85885: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...

CVE-2026-85878: Improper Authorization

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...

CVE-2026-62874: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70200: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-83944: Improper Access Control

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

PT-2026-95177

Name of the Vulnerable Software and Affected Versions Azure Cosmos DB affected versions not specified Description An issue involving improper neutralization of special elements in output used by a downstream component, known as injection, allows an authorized attacker to elevate privileges over a...

CVE-2026-70009: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-87701: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network...

CVE-2026-69843: Authentication Bypass by Spoofing

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-77903: Authentication Bypass by Spoofing

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69865: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-80051

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-87239

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-83415

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-83272

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Create Index privilege with network access via Oracle Net to compromis...