CVE-2026-32171

| EUVD-2026-22560 HIGH
2026-04-14 microsoft GHSA-jw55-vf6x-jr62
Information Disclosure Microsoft
8.8
CVSS 3.1
Temporal: 7.7
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Re-analysis Queued
Apr 17, 2026 - 15:22 vuln.today
cvss_changed
Analysis Generated
Apr 14, 2026 - 19:34 vuln.today

DescriptionNVD

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.

AnalysisAI

Azure Logic Apps fails to adequately protect stored credentials, enabling authenticated attackers with network access to escalate privileges and gain unauthorized access to sensitive data. With a CVSS score of 8.8 and low attack complexity (AC:L), this vulnerability poses significant risk to cloud environments where Logic Apps handle integration credentials. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify all Azure Logic Apps instances in your environment and document which service principals or user accounts have access. Within 7 days: Apply the vendor-released patch to all affected Logic Apps instances and validate deployments in a test environment first. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

CVE-2026-32171 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy