The vulnerability of Azure’s Application Insights Profiler, a cloud-based tool for analyzing web application performance, stems from an incorrect path name limitation in the catalog. This allows attackers to escalate their privileges.

The vulnerability of Azure’s Application Insights Profiler, a cloud-based tool for analyzing web application performance, is related to an incorrect path name limitation. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

EUVD-2026-54318

Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...

CVE-2026-49163

Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...

CVE-2026-49163

Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...

CVE-2026-49163 Application Insights Profiler Elevation of Privilege Vulnerability

...

CVE-2026-49163 Application Insights Profiler Elevation of Privilege Vulnerability

...

CVE-2026-49163

CVE-2026-49163 concerns an improper limitation of a pathname to a restricted directory (path traversal) in Application Insights Profiler, enabling an authorized attacker to elevate privileges over the network. The entry specifies a CVSSv3.1 base score of 8.8 (High) with Network attack vector, Low...

Application Insights Profiler Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...

CVE-2026-49163: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...

PT-2026-68824

Name of the Vulnerable Software and Affected Versions Application Insights Profiler affected versions not specified Description An authorized attacker can elevate privileges over a network due to a path traversal issue. This occurs because the software fails to properly limit pathnames to a...

KLA91190 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

Malicious Package

Overview microsoft-applicationinsights-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

Malicious Package

Overview microsoft.applicationinsights.persistencechannel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious code in microsoft.applicationinsights (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-851 Malicious code in microsoft.applicationinsights (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11883 Malicious code in microsoft.applicationinsights.windowsapps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52a55ac73cfe94f23310de107d74ba82bfa2e8ae17f9742af50ef4e2da42c98d The OpenSSF Package Analysis project identified 'microsoft.applicationinsights.windowsapps' @ 99.99.99 npm as malicious. It is considered...

Malicious code in microsoft.applicationinsights.persistencechannel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c6d541610ea02e1c898560a24798cf5ccb4c38d66f367bc6f205cc4fe5377dc The OpenSSF Package Analysis project identified 'microsoft.applicationinsights.persistencechannel' @ 99.99.99 npm as malicious. It is considered...

MAL-2024-6646 Malicious code in application-insights (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in application-insights (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: OpenSSL vulnerabilities might impact IBM Cloud Application Business Insights - CVE-2022-3602 & CVE-2022-3786

Summary OpenSSL vulnerabilities might impact IBM Cloud Application Business Insights - CVE-2022-3602 & CVE-2022-3786. Vulnerability Details CVEID:CVE-2022-3602 DESCRIPTION: OpenSSL is vulnerable to a stack-based buffer overflow, caused by improper bounds checking during X.509 certificate...