Month: July 2026

Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability→

Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability→

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network. Continue reading CVE-2026-35425 Azure API Management (APIM) Remote Code Execution Vulnerability→

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-49159 Microsoft Graph Information Disclosure Vulnerability→

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network. Continue reading CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability→

Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network. Continue reading CVE-2026-56191 Microsoft Exchange Online Tampering Vulnerability→

Information published. Continue reading CVE-2026-54171 Excon: redact additional sensitive/risky headers when following redirects→

Information published. Continue reading CVE-2026-44508 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43618. Reason: This candidate is a duplicate of CVE-2026-43618. Notes: All CVE users should reference CVE-2026-43618 instead of this candidate.→