Azure CVE-2026-21532

Path traversal in pnpm's tarball extraction on Windows allows attackers to write files outside the intended package dire

Default password in Himmelblau Azure Entra ID suite 3.0.0-3.0.x. CVSS 10.0.

Default credentials in Cisco ISE cloud deployments on AWS/Azure/OCI. CVSS 9.9.

Deserialization of untrusted data in Azure SDK allows unauthorized code execution over a network. EPSS 0.32%.

Elevation of privilege vulnerability in Azure Front Door allows attackers to gain elevated access. Microsoft Azure cloud

Azure Front Door has an improper access control vulnerability (CVSS 9.8) allowing unauthorized attackers to elevate priv

Azure AD auth bypass in Devolutions Server 2025.3.15.0 and earlier.

Fleet device management software has a signature verification bypass that allows attackers to install malicious firmware

Azure Entra ID (formerly Azure AD) has an elevation of privilege vulnerability allowing attackers to escalate permission

Privilege escalation in Azure Logic Apps results from improper path validation, enabling remote attackers to gain elevat

Remote code execution in Azure Local stems from improper certificate validation, enabling unauthenticated attackers to e

Local privilege escalation in Azure Connected Machine Agent exploits a stack-based buffer overflow, enabling authenticat