CVE-2026-56161

Azure Logic Apps is identified in CVE-2026-56161 as having improper access control that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 9.6 (CRITICAL) with NETWORK attack vector, LOW attack complexity, LOW privileges required, and no user interacti...

CVE-2026-69400

Azure Logic Apps path traversal flaw allows unauthenticated network attackers to elevate privileges. CVSS 9.6 (Critical) with high confidentiality, integrity, and availability impact. Microsoft Security Response Center is tracking the issue at the linked update guide; no patch version or exploita...

CVE-2026-32171

CVE-2026-32171—Azure Logic Apps Elevation of Privilege is confirmed with a high-severity impact (CVSS v3.1 base 8.8) due to insufficiently protected credentials that allow an authorized attacker to obtain elevated privileges over the network. Affected product: Azure Logic Apps. Root cause: insuff...

CVE-2026-42823

Azure Logic Apps is affected by CVE-2026-42823 due to improper access control that may allow an authorized attacker to elevate privileges over a network. The CVSS 3.1 metrics indicate a CRITICAL score (9.9) with network attack vector, low complexity, and privileges required, and impacts to confid...

CVE-2026-21227

The CVE-2026-21227 entry describes a path traversal vulnerability in Azure Logic Apps: improper limitation of a pathname to a restricted directory that could allow an unauthenticated attacker to elevate privileges over a network. The root cause is stated as a pathname restriction flaw in Azure Lo...