Month: August 2026

Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability→

Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-69558 Microsoft Partner Center Information Disclosure Vulnerability→

Improper limitation of a pathname to a restricted directory (‘path traversal’) in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability→

Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network. Continue reading CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability→

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally. Continue reading CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability→

Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability→

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally. Continue reading CVE-2026-55015 Microsoft Remote Help Denial of Service Vulnerability→

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability→