58 matches found
EUVD-2026-95394
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network...
CVE-2026-77900
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network...
CVE-2026-77900
A critical vulnerability in Azure App Service (CVE-2026-77900) stems from missing authentication for a critical function. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 9.8 . No specific explo...
Azure App Service Remote Code Execution Vulnerability
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network...
KLA91325 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...
PT-2026-108297
Name of the Vulnerable Software and Affected Versions Azure App Service affected versions not specified Description Missing authentication for a critical function allows an unauthorized, network-reachable attacker to execute arbitrary code without providing credentials. Recommendations At the...
CVE-2026-77900: Missing Authentication for Critical Function
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network...
CVE-2026-58630
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
...
EUVD-2026-48602
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-58630
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
...
CVE-2026-58630
CVE-2026-58630 concerns Azure App Service on Azure Stack Hub. The issue is improper access control that allows an unauthenticated attacker to elevate privileges over a network. Impact is high for confidentiality and integrity; CVSS 3.1 base score 10.0. Connected sources confirm the name and core ...
CVE-2026-58630: Improper Access Control
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network...
PT-2026-64316
Name of the Vulnerable Software and Affected Versions Azure App Service affected versions not specified Description Improper access control allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...
Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network...
Essity: Critical SQL Injection WDM API (████████)
A boolean-based and time-based blind SQL injection vulnerability was discovered in the searchText query parameter of the GET /api/WDMProduct endpoint. The vulnerability allowed an unauthenticated attacker to read or modify data in the backing Microsoft SQL Server database. The backend was found t...
org.jenkins-ci.plugins:azure-app-service (>=0.1, <=0.4.2), org.jenkins-ci.plugins:azure-function (>=0.1.0, <=0.3.0) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (2.4.6)
org.jenkins-ci.plugins:git-client MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:azure-app-service =0.1, =0.1.0, =0.3.0 Source cves: CVE-2025-67640...