Azure CVE-2026-24300

Privilege escalation in Microsoft's Azure Billing service allows unauthenticated, remote attackers to reach full comprom

Path traversal in pnpm's tarball extraction on Windows allows attackers to write files outside the intended package dire

Default password in Himmelblau Azure Entra ID suite 3.0.0-3.0.x. CVSS 10.0.

Privilege escalation in Azure Database for PostgreSQL allows an authenticated attacker with low privileges to elevate pr

Path traversal in Microsoft's Azure Logic Apps (CWE-22) lets a remote, unauthenticated attacker escape an intended restr

Default credentials in Cisco ISE cloud deployments on AWS/Azure/OCI. CVSS 9.9.

Unauthenticated remote attackers can reach a critical function inside Microsoft Azure AI Foundry that performs a privile

Deserialization of untrusted data in Azure SDK allows unauthorized code execution over a network. EPSS 0.32%.

Azure Front Door has an improper access control vulnerability (CVSS 9.8) allowing unauthorized attackers to elevate priv

Azure AD auth bypass in Devolutions Server 2025.3.15.0 and earlier.

Fleet device management software has a signature verification bypass that allows attackers to install malicious firmware

Privilege elevation in Microsoft Azure Cosmos DB allows an attacker who already holds valid low-level authorization to a