Month: September 2026

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-70178 Microsoft Fabric Elevation of Privilege Vulnerability→

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability→

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-80098 Copilot Studio Elevation of Privilege Vulnerability→

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability→

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-69857 Azure Cosmos DB Spoofing Vulnerability→

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-65818 Power Automate Elevation of Privilege Vulnerability→

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-62916 Microsoft Entra ID Elevation of Privilege Vulnerability→