43 matches found
CVE-2026-4398 Authorization Bypass Through User-Controlled Key in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have assigned compliance frameworks from namespaces they were not authorized to access to their own...
EUVD-2026-63619
Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...
CVE-2026-65770
Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-65770
Azure Managed Instance for Apache Cassandra is affected by an argument injection vulnerability (improper neutralization of argument delimiters in a command) that allows an unauthorized attacker to execute code over a network without any privileges or user interaction. The CVSS 3.1 score is 10.0 (...
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...
PT-2026-79199
Name of the Vulnerable Software and Affected Versions Azure Managed Instance for Apache Cassandra affected versions not specified Description Improper neutralization of argument delimiters in a command, known as argument injection, allows an unauthorized attacker to execute code over a network...
CVE-2026-65770: Improper Neutralization of Argument Delimiters in a Command
Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...
The vulnerability of Azure SQL Managed Instance, a PaaS service, arises from insufficient network connection restrictions for specified endpoints. This allows attackers to escalate their privileges.
The vulnerability of Azure SQL Managed Instance PaaS is related to insufficient network connection restrictions for specified endpoints. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
EUVD-2026-54311
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62836
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability
...
CVE-2026-62836
CVE-2026-62836 affects Azure SQL Managed Instance. The vulnerability arises from improper restriction of the communication channel to intended endpoints, enabling a network-based elevation of privileges by an unauthenticated attacker. Affected products include Azure SQL Managed Instance (and rela...
CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability
...
Azure SQL Managed Instance Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
PT-2026-68832
Name of the Vulnerable Software and Affected Versions Azure SQL Managed Instance affected versions not specified Description Improper restriction of the communication channel to intended endpoints allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment,...
CVE-2026-62836: Improper Restriction of Communication Channel to Intended Endpoints
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
