CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability

...

CVE-2026-66800

An SSRF flaw in Azure Data Factory lets an unauthenticated network attacker disclose sensitive information (CVSS 8.6 HIGH, scope changed). No exploit details are provided; Microsoft has published an update guide at the referenced MSRC link. Monitor for patch details and apply Azure Data Factory u...

CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability

...

CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability

...

CVE-2026-62834

CVE-2026-62834 is a critical elevation of privilege vulnerability in Azure Data Factory caused by improper verification of a cryptographic signature. An unauthorized attacker can exploit this over the network to elevate privileges, with high impact on both confidentiality and integrity (CVSS 3.1:...

Azure Data Factory Information Disclosure Vulnerability

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...

Azure Data Factory Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...

PT-2026-79195

Name of the Vulnerable Software and Affected Versions Azure Data Factory affected versions not specified Description Improper verification of cryptographic signatures allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about...

CVE-2026-66800: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...

CVE-2026-62834: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...

PT-2026-79203

Name of the Vulnerable Software and Affected Versions Azure Data Factory affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to disclose information over a network. SSRF is a flaw where a server is tricked into making requests to an...

PT-2026-78551

Name of the Vulnerable Software and Affected Versions Orval versions prior to 8.21.0 Description Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. A flaw exists where a single quote in a schema property name is emitted into single-quoted...

CVE-2026-63335

creationtimestamp| type| source ---|---|--- 2026-08-18 18:35:15+00:00| published-proof-of-concept| https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-qx7j-jv8m-fppr...

EUVD-2026-41135

mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"...

CVE-2026-15413

The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key except for the health check...

CVE-2026-15413 Link Factory - Backdoor

The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key except for the health check...

CVE-2026-15413

The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key except for the health check...

EUVD-2026-57747

The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key except for the health check...

CVE-2026-15413 Link Factory - Backdoor

The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key except for the health check...

CVE-2026-15413

The CVE-2026-15413 entry concerns the Link Factory WordPress plugin, described as a backdoor. It exposes an operator-controlled REST API at /wp-json/link-factory/v1/ authenticated by a detached Ed25519 signature verified against a hardcoded operator public key (health check excluded). The vulnera...