CVE-2026-33980

CVE-2026-33980 — KQL-Injection in adx-mcp-server über den Parameter tablename Schweregrad : Hoch CVSS 8.8 CWE : CWE-943 — Unzureichende Neutralisierung spezieller Elemente in der Datenabfragelogik Betroffen : adx-mcp-server = 0.1.0 Commit 48b2933 Advisory : GHSA NVD :...

EUVD-2026-63688

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-63625

Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...

EUVD-2026-63623

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...

CVE-2026-69419

Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...

CVE-2026-66800

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...

CVE-2026-62834

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability

...

CVE-2026-69419

An integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code remotely. Microsoft's update guide is the reference; no specific affected version, patch, or exploit details are provided in the documents.

CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability

...

CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability

...

CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability

...

CVE-2026-66800

An SSRF flaw in Azure Data Factory lets an unauthenticated network attacker disclose sensitive information (CVSS 8.6 HIGH, scope changed). No exploit details are provided; Microsoft has published an update guide at the referenced MSRC link. Monitor for patch details and apply Azure Data Factory u...

CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability

...

CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability

...

CVE-2026-62834

CVE-2026-62834 is a critical elevation of privilege vulnerability in Azure Data Factory caused by improper verification of a cryptographic signature. An unauthorized attacker can exploit this over the network to elevate privileges, with high impact on both confidentiality and integrity (CVSS 3.1:...

Azure Data Manager for Energy Remote Code Execution Vulnerability

Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...

Azure Data Factory Information Disclosure Vulnerability

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...

Azure Data Factory Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...

PT-2026-79209

Name of the Vulnerable Software and Affected Versions Azure Data Manager for Energy affected versions not specified Description An integer overflow or wraparound occurs in Azure Data Manager for Energy, which allows an authorized attacker to execute code over a network. An integer overflow is a...