Vulnerability-Lookup

WID-SEC-W-2026-1419

Vulnerability from csaf_certbund - Published: 2026-05-07 22:00 - Updated: 2026-05-12 22:00

Summary

Microsoft Azure: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Azure ist eine Cloud Computing-Plattform von Microsoft. Microsoft Azure DevOps Server ist eine Plattform für kollaborative Softwareprojekte.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure ausnutzen, um beliebigen Programmcode auszuführen, erhöhte Privilegien zu erlangen oder Spoofing-Angriffe durchzuführen.

Betroffene Betriebssysteme: - Windows

CVE-2026-32207

Affected products

Known affected 7 products

Product	Identifier	Version
Microsoft Azure Monitor Action Group notification system Microsoft / Azure	`cpe:/a:microsoft:azure:monitor_action_group_notification_system`	Monitor Action Group notification system
Microsoft Azure Cloud Shell Microsoft / Azure	`cpe:/a:microsoft:azure:cloud_shell`	Cloud Shell
Microsoft Azure Managed Instance for Apache Cassandra Microsoft / Azure	`cpe:/a:microsoft:azure:managed_instance_for_apache_cassandra`	Managed Instance for Apache Cassandra
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Machine Learning Microsoft / Azure	`cpe:/a:microsoft:azure:machine_learning`	Machine Learning
Microsoft Azure Notification Service Microsoft / Azure	`cpe:/a:microsoft:azure:notification_service`	Notification Service
Microsoft Azure Entra ID Microsoft / Azure	`cpe:/a:microsoft:azure:entra_id`	Entra ID

CVE-2026-33109

Affected products

Known affected 7 products

Product	Identifier	Version
Microsoft Azure Monitor Action Group notification system Microsoft / Azure	`cpe:/a:microsoft:azure:monitor_action_group_notification_system`	Monitor Action Group notification system
Microsoft Azure Cloud Shell Microsoft / Azure	`cpe:/a:microsoft:azure:cloud_shell`	Cloud Shell
Microsoft Azure Managed Instance for Apache Cassandra Microsoft / Azure	`cpe:/a:microsoft:azure:managed_instance_for_apache_cassandra`	Managed Instance for Apache Cassandra
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Machine Learning Microsoft / Azure	`cpe:/a:microsoft:azure:machine_learning`	Machine Learning
Microsoft Azure Notification Service Microsoft / Azure	`cpe:/a:microsoft:azure:notification_service`	Notification Service
Microsoft Azure Entra ID Microsoft / Azure	`cpe:/a:microsoft:azure:entra_id`	Entra ID

CVE-2026-33844

Affected products

Known affected 7 products

Product	Identifier	Version
Microsoft Azure Monitor Action Group notification system Microsoft / Azure	`cpe:/a:microsoft:azure:monitor_action_group_notification_system`	Monitor Action Group notification system
Microsoft Azure Cloud Shell Microsoft / Azure	`cpe:/a:microsoft:azure:cloud_shell`	Cloud Shell
Microsoft Azure Managed Instance for Apache Cassandra Microsoft / Azure	`cpe:/a:microsoft:azure:managed_instance_for_apache_cassandra`	Managed Instance for Apache Cassandra
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Machine Learning Microsoft / Azure	`cpe:/a:microsoft:azure:machine_learning`	Machine Learning
Microsoft Azure Notification Service Microsoft / Azure	`cpe:/a:microsoft:azure:notification_service`	Notification Service
Microsoft Azure Entra ID Microsoft / Azure	`cpe:/a:microsoft:azure:entra_id`	Entra ID

CVE-2026-34327

Affected products

Known affected 7 products

Product	Identifier	Version
Microsoft Azure Monitor Action Group notification system Microsoft / Azure	`cpe:/a:microsoft:azure:monitor_action_group_notification_system`	Monitor Action Group notification system
Microsoft Azure Cloud Shell Microsoft / Azure	`cpe:/a:microsoft:azure:cloud_shell`	Cloud Shell
Microsoft Azure Managed Instance for Apache Cassandra Microsoft / Azure	`cpe:/a:microsoft:azure:managed_instance_for_apache_cassandra`	Managed Instance for Apache Cassandra
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Machine Learning Microsoft / Azure	`cpe:/a:microsoft:azure:machine_learning`	Machine Learning
Microsoft Azure Notification Service Microsoft / Azure	`cpe:/a:microsoft:azure:notification_service`	Notification Service
Microsoft Azure Entra ID Microsoft / Azure	`cpe:/a:microsoft:azure:entra_id`	Entra ID

CVE-2026-35428

Affected products

Known affected 7 products

Product	Identifier	Version
Microsoft Azure Monitor Action Group notification system Microsoft / Azure	`cpe:/a:microsoft:azure:monitor_action_group_notification_system`	Monitor Action Group notification system
Microsoft Azure Cloud Shell Microsoft / Azure	`cpe:/a:microsoft:azure:cloud_shell`	Cloud Shell
Microsoft Azure Managed Instance for Apache Cassandra Microsoft / Azure	`cpe:/a:microsoft:azure:managed_instance_for_apache_cassandra`	Managed Instance for Apache Cassandra
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Machine Learning Microsoft / Azure	`cpe:/a:microsoft:azure:machine_learning`	Machine Learning
Microsoft Azure Notification Service Microsoft / Azure	`cpe:/a:microsoft:azure:notification_service`	Notification Service
Microsoft Azure Entra ID Microsoft / Azure	`cpe:/a:microsoft:azure:entra_id`	Entra ID

CVE-2026-35435

Affected products

Known affected 7 products

Product	Identifier	Version
Microsoft Azure Monitor Action Group notification system Microsoft / Azure	`cpe:/a:microsoft:azure:monitor_action_group_notification_system`	Monitor Action Group notification system
Microsoft Azure Cloud Shell Microsoft / Azure	`cpe:/a:microsoft:azure:cloud_shell`	Cloud Shell
Microsoft Azure Managed Instance for Apache Cassandra Microsoft / Azure	`cpe:/a:microsoft:azure:managed_instance_for_apache_cassandra`	Managed Instance for Apache Cassandra
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Machine Learning Microsoft / Azure	`cpe:/a:microsoft:azure:machine_learning`	Machine Learning
Microsoft Azure Notification Service Microsoft / Azure	`cpe:/a:microsoft:azure:notification_service`	Notification Service
Microsoft Azure Entra ID Microsoft / Azure	`cpe:/a:microsoft:azure:entra_id`	Entra ID

CVE-2026-40379

Affected products

Known affected 7 products

Product	Identifier	Version
Microsoft Azure Monitor Action Group notification system Microsoft / Azure	`cpe:/a:microsoft:azure:monitor_action_group_notification_system`	Monitor Action Group notification system
Microsoft Azure Cloud Shell Microsoft / Azure	`cpe:/a:microsoft:azure:cloud_shell`	Cloud Shell
Microsoft Azure Managed Instance for Apache Cassandra Microsoft / Azure	`cpe:/a:microsoft:azure:managed_instance_for_apache_cassandra`	Managed Instance for Apache Cassandra
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Machine Learning Microsoft / Azure	`cpe:/a:microsoft:azure:machine_learning`	Machine Learning
Microsoft Azure Notification Service Microsoft / Azure	`cpe:/a:microsoft:azure:notification_service`	Notification Service
Microsoft Azure Entra ID Microsoft / Azure	`cpe:/a:microsoft:azure:entra_id`	Entra ID

CVE-2026-41105

Affected products

Known affected 7 products

Product	Identifier	Version
Microsoft Azure Monitor Action Group notification system Microsoft / Azure	`cpe:/a:microsoft:azure:monitor_action_group_notification_system`	Monitor Action Group notification system
Microsoft Azure Cloud Shell Microsoft / Azure	`cpe:/a:microsoft:azure:cloud_shell`	Cloud Shell
Microsoft Azure Managed Instance for Apache Cassandra Microsoft / Azure	`cpe:/a:microsoft:azure:managed_instance_for_apache_cassandra`	Managed Instance for Apache Cassandra
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Machine Learning Microsoft / Azure	`cpe:/a:microsoft:azure:machine_learning`	Machine Learning
Microsoft Azure Notification Service Microsoft / Azure	`cpe:/a:microsoft:azure:notification_service`	Notification Service
Microsoft Azure Entra ID Microsoft / Azure	`cpe:/a:microsoft:azure:entra_id`	Entra ID

References

3 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://msrc.microsoft.com/update-guide/	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Azure ist eine Cloud Computing-Plattform von Microsoft.\r\nMicrosoft Azure DevOps Server ist eine Plattform f\u00fcr kollaborative Softwareprojekte.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure ausnutzen, um beliebigen Programmcode auszuf\u00fchren, erh\u00f6hte Privilegien zu erlangen oder Spoofing-Angriffe durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1419 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1419.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1419 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1419"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates",
        "url": "https://msrc.microsoft.com/update-guide/"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft Azure: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-05-12T22:00:00.000+00:00",
      "generator": {
        "date": "2026-05-13T07:20:58.208+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-1419",
      "initial_release_date": "2026-05-07T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-05-07T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-05-12T22:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: EUVD-2026-29655"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Machine Learning",
                "product": {
                  "name": "Microsoft Azure Machine Learning",
                  "product_id": "T053667",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:machine_learning"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Managed Instance for Apache Cassandra",
                "product": {
                  "name": "Microsoft Azure Managed Instance for Apache Cassandra",
                  "product_id": "T053668",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:managed_instance_for_apache_cassandra"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "AI Foundry",
                "product": {
                  "name": "Microsoft Azure AI Foundry",
                  "product_id": "T053669",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:ai_foundry"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Cloud Shell",
                "product": {
                  "name": "Microsoft Azure Cloud Shell",
                  "product_id": "T053670",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:cloud_shell"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Monitor Action Group notification system",
                "product": {
                  "name": "Microsoft Azure Monitor Action Group notification system",
                  "product_id": "T053671",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:monitor_action_group_notification_system"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Entra ID",
                "product": {
                  "name": "Microsoft Azure Entra ID",
                  "product_id": "T053674",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:entra_id"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Notification Service",
                "product": {
                  "name": "Microsoft Azure Notification Service",
                  "product_id": "T053675",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:notification_service"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Azure"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-32207",
      "product_status": {
        "known_affected": [
          "T053671",
          "T053670",
          "T053668",
          "T053669",
          "T053667",
          "T053675",
          "T053674"
        ]
      },
      "release_date": "2026-05-07T22:00:00.000+00:00",
      "title": "CVE-2026-32207"
    },
    {
      "cve": "CVE-2026-33109",
      "product_status": {
        "known_affected": [
          "T053671",
          "T053670",
          "T053668",
          "T053669",
          "T053667",
          "T053675",
          "T053674"
        ]
      },
      "release_date": "2026-05-07T22:00:00.000+00:00",
      "title": "CVE-2026-33109"
    },
    {
      "cve": "CVE-2026-33844",
      "product_status": {
        "known_affected": [
          "T053671",
          "T053670",
          "T053668",
          "T053669",
          "T053667",
          "T053675",
          "T053674"
        ]
      },
      "release_date": "2026-05-07T22:00:00.000+00:00",
      "title": "CVE-2026-33844"
    },
    {
      "cve": "CVE-2026-34327",
      "product_status": {
        "known_affected": [
          "T053671",
          "T053670",
          "T053668",
          "T053669",
          "T053667",
          "T053675",
          "T053674"
        ]
      },
      "release_date": "2026-05-07T22:00:00.000+00:00",
      "title": "CVE-2026-34327"
    },
    {
      "cve": "CVE-2026-35428",
      "product_status": {
        "known_affected": [
          "T053671",
          "T053670",
          "T053668",
          "T053669",
          "T053667",
          "T053675",
          "T053674"
        ]
      },
      "release_date": "2026-05-07T22:00:00.000+00:00",
      "title": "CVE-2026-35428"
    },
    {
      "cve": "CVE-2026-35435",
      "product_status": {
        "known_affected": [
          "T053671",
          "T053670",
          "T053668",
          "T053669",
          "T053667",
          "T053675",
          "T053674"
        ]
      },
      "release_date": "2026-05-07T22:00:00.000+00:00",
      "title": "CVE-2026-35435"
    },
    {
      "cve": "CVE-2026-40379",
      "product_status": {
        "known_affected": [
          "T053671",
          "T053670",
          "T053668",
          "T053669",
          "T053667",
          "T053675",
          "T053674"
        ]
      },
      "release_date": "2026-05-07T22:00:00.000+00:00",
      "title": "CVE-2026-40379"
    },
    {
      "cve": "CVE-2026-41105",
      "product_status": {
        "known_affected": [
          "T053671",
          "T053670",
          "T053668",
          "T053669",
          "T053667",
          "T053675",
          "T053674"
        ]
      },
      "release_date": "2026-05-07T22:00:00.000+00:00",
      "title": "CVE-2026-41105"
    }
  ]
}

CVE-2026-32207 (GCVE-0-2026-32207)

Vulnerability from cvelistv5 – Published: 2026-05-07 20:58 – Updated: 2026-06-09 19:32 Exclusively Hosted Service

Title

Azure Machine Learning Notebook Spoofing Vulnerability

Summary

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Machine Learning	Affected: -

Date Public

2026-05-07 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-32207",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-09T03:55:56.457Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Machine Learning",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_machine_learning:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper neutralization of input during web page generation (\u0027cross-site scripting\u0027) in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T19:32:20.764Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Machine Learning Notebook Spoofing Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32207"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure Machine Learning Notebook Spoofing Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-32207",
    "datePublished": "2026-05-07T20:58:51.273Z",
    "dateReserved": "2026-03-11T01:49:58.659Z",
    "dateUpdated": "2026-06-09T19:32:20.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33109 (GCVE-0-2026-33109)

Vulnerability from cvelistv5 – Published: 2026-05-07 20:58 – Updated: 2026-06-09 19:32 Exclusively Hosted Service

Title

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

Summary

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

Severity

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-284 - Improper Access Control

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Managed Instance for Apache Cassandra	Affected: -

Date Public

2026-05-07 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-33109",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-09T03:56:08.597Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Managed Instance for Apache Cassandra",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_managed_instance_for_apache_cassandra:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T19:32:21.639Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33109"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-33109",
    "datePublished": "2026-05-07T20:58:49.441Z",
    "dateReserved": "2026-03-17T20:15:23.720Z",
    "dateUpdated": "2026-06-09T19:32:21.639Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33844 (GCVE-0-2026-33844)

Vulnerability from cvelistv5 – Published: 2026-05-07 20:58 – Updated: 2026-06-09 19:33 Exclusively Hosted Service

Title

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

Summary

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

Severity

9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Improper Input Validation

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Managed Instance for Apache Cassandra	Affected: -

Date Public

2026-05-07 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-33844",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-09T03:56:10.766Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Managed Instance for Apache Cassandra",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_managed_instance_for_apache_cassandra:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T19:33:53.425Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33844"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-33844",
    "datePublished": "2026-05-07T20:58:52.985Z",
    "dateReserved": "2026-03-24T00:52:01.354Z",
    "dateUpdated": "2026-06-09T19:33:53.425Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-34327 (GCVE-0-2026-34327)

Vulnerability from cvelistv5 – Published: 2026-05-07 20:58 – Updated: 2026-06-09 19:33 Exclusively Hosted Service

Title

Microsoft Partner Center Spoofing Vulnerability

Summary

Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-610 - Externally Controlled Reference to a Resource in Another Sphere

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Microsoft Partner Center	Affected: -

Date Public

2026-05-07 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-34327",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T13:51:06.956378Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T13:51:15.764Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Microsoft Partner Center",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:partner_center:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-610",
              "description": "CWE-610: Externally Controlled Reference to a Resource in Another Sphere",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T19:33:54.047Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft Partner Center Spoofing Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34327"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Microsoft Partner Center Spoofing Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-34327",
    "datePublished": "2026-05-07T20:58:54.185Z",
    "dateReserved": "2026-03-26T21:02:16.445Z",
    "dateUpdated": "2026-06-09T19:33:54.047Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-35428 (GCVE-0-2026-35428)

Vulnerability from cvelistv5 – Published: 2026-05-07 20:58 – Updated: 2026-06-09 19:33 Exclusively Hosted Service

Title

Azure Cloud Shell Spoofing Vulnerability

Summary

Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Cloud Shell	Affected: -

Date Public

2026-05-07 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35428",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-09T03:55:54.225Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Cloud Shell",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_cloud_shell:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper neutralization of special elements used in a command (\u0027command injection\u0027) in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77: Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T19:33:54.523Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Cloud Shell Spoofing Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35428"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure Cloud Shell Spoofing Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-35428",
    "datePublished": "2026-05-07T20:58:58.256Z",
    "dateReserved": "2026-04-02T19:21:11.804Z",
    "dateUpdated": "2026-06-09T19:33:54.523Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-35435 (GCVE-0-2026-35435)

Vulnerability from cvelistv5 – Published: 2026-05-07 20:58 – Updated: 2026-06-09 19:33 Exclusively Hosted Service

Title

Azure AI Foundry Elevation of Privilege Vulnerability

Summary

Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-284 - Improper Access Control

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure AI Foundry	Affected: -

Date Public

2026-05-07 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35435",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-09T03:56:10.476467Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-10T14:30:15.176Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure AI Foundry",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_ai_foundry:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T19:33:55.026Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure AI Foundry Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35435"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure AI Foundry Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-35435",
    "datePublished": "2026-05-07T20:58:55.593Z",
    "dateReserved": "2026-04-02T19:21:11.805Z",
    "dateUpdated": "2026-06-09T19:33:55.026Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40379 (GCVE-0-2026-40379)

Vulnerability from cvelistv5 – Published: 2026-05-12 16:58 – Updated: 2026-06-09 19:32 Exclusively Hosted Service

Title

Azure Entra ID Spoofing Vulnerability

Summary

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.

Severity

9.3 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Microsoft Entra	Affected: -

Date Public

2026-05-07 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40379",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-12T19:08:54.639859Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T19:09:01.567Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Microsoft Entra",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:microsoft_entra_id:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T19:32:19.151Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Entra ID Spoofing Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40379"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure Entra ID Spoofing Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-40379",
    "datePublished": "2026-05-12T16:58:10.399Z",
    "dateReserved": "2026-04-11T23:06:15.615Z",
    "dateUpdated": "2026-06-09T19:32:19.151Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-41105 (GCVE-0-2026-41105)

Vulnerability from cvelistv5 – Published: 2026-05-07 20:58 – Updated: 2026-06-09 19:33 Exclusively Hosted Service

Title

Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability

Summary

Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Monitor Action Group notification system	Affected: -

Date Public

2026-05-07 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-41105",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-09T03:56:08.287102Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-10T14:30:30.570Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Monitor Action Group notification system",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_monitor_action_group_notification_system:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-05-07T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T19:33:56.124Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41105"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-41105",
    "datePublished": "2026-05-07T20:58:47.705Z",
    "dateReserved": "2026-04-16T19:12:36.195Z",
    "dateUpdated": "2026-06-09T19:33:56.124Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2026-1419

CVE-2026-32207 (GCVE-0-2026-32207)

CVE-2026-33109 (GCVE-0-2026-33109)

CVE-2026-33844 (GCVE-0-2026-33844)

CVE-2026-34327 (GCVE-0-2026-34327)

CVE-2026-35428 (GCVE-0-2026-35428)

CVE-2026-35435 (GCVE-0-2026-35435)

CVE-2026-40379 (GCVE-0-2026-40379)

CVE-2026-41105 (GCVE-0-2026-41105)

Tags

Sightings

Nomenclature