Azure cloud services authentication Privilege Escalation

The vulnerability of Azure cloud services for managing geospatial data with the Microsoft Planetary Computer Pro is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

EUVD-2026-54325

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

...

CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

...

CVE-2026-63508

The CVE-2026-63508 entry concerns Microsoft Planetary Computer Pro. It describes a missing authentication vulnerability in a critical function that enables an unauthenticated, network-based attacker to elevate privileges. According to the provided metrics, the CVSSv3.1 base score is 10.0 (CRITICA...

CVE-2026-63508: Missing Authentication for Critical Function

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network...

PT-2026-68836

Name of the Vulnerable Software and Affected Versions Microsoft Planetary Computer Pro affected versions not specified Description Missing authentication for a critical function allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

Azure cloud services deserialization Disclosure

The vulnerability of Azure cloud services for managing geospatial data with the Microsoft Planetary Computer Pro is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

CVE-2026-41104

Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network...

CVE-2026-41104 Microsoft Planetary Computer Pro Information Disclosure Vulnerability

...

CVE-2026-41104: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network...