CVE-2025-66390

Microsoft Azure API Management (versions prior to 2025-10-17 ) is susceptible to a cross-tenant registration bypass when self-service signup (Basic Authentication) is enabled in one tenant. The issue stems from the fact that disabling signup in the UI only hides the form but does not deactivate t...