135 matches found
CVE-2026-33980
CVE-2026-33980 — KQL Injection in adx-mcp-server via tablename parameter Severity : High CVSS 8.3 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : adx-mcp-server = 1.1.0 Advisory : GHSA-vphc-468g-8rfp NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-33980...
Apache Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir
Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...
GHSA-7JWC-Q3FJ-C9PQ Apache Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir
Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...
CVE-2026-60093 Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir
Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...
EUVD-2026-63688
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-63623
Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...
EUVD-2026-63625
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...
CVE-2026-69419
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...
CVE-2026-66800
Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...
CVE-2026-62834
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69419
An integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code remotely. Microsoft's update guide is the reference; no specific affected version, patch, or exploit details are provided in the documents.
CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability
...
CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability
...
CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability
...
CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability
...
CVE-2026-66800
An SSRF flaw in Azure Data Factory lets an unauthenticated network attacker disclose sensitive information (CVSS 8.6 HIGH, scope changed). No exploit details are provided; Microsoft has published an update guide at the referenced MSRC link. Monitor for patch details and apply Azure Data Factory u...
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
...
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
...
CVE-2026-62834
CVE-2026-62834 is a critical elevation of privilege vulnerability in Azure Data Factory caused by improper verification of a cryptographic signature. An unauthorized attacker can exploit this over the network to elevate privileges, with high impact on both confidentiality and integrity (CVSS 3.1:...
