Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.Apr 3, 2026
- Critical9.8Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.Apr 3, 2026
- High7.5Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.Apr 3, 2026
- High7.5Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.Apr 3, 2026
- High8.8Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.Apr 3, 2026
- High7.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Apr 1, 2026
- High8.1Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and explore Azure Data Explorer (ADX/Kusto) d…Mar 27, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.Mar 19, 2026
- High7.5Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network.Mar 19, 2026
- Critical9.8Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.Mar 19, 2026
- High8.7The Azure Blob Storage for Craft CMS plugin provides an Azure Blob Storage integration for Craft CMS.Mar 18, 2026
- High7.8Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Mar 11, 2026
- Critical10.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Mar 11, 2026
- High8.1External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.Mar 10, 2026
- High7.8Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.Mar 10, 2026
- High7.5Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.Mar 10, 2026
- High8.8Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.Mar 10, 2026
- High7.8Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.Mar 10, 2026
- High7.8Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally.Mar 10, 2026
- High7.5Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.Mar 10, 2026
- High7.5Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.Mar 10, 2026
- High7.5Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.Mar 10, 2026
- High7.8Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.Mar 10, 2026
- Medium6.7'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.Mar 5, 2026
- Medium6.5Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network.Mar 5, 2026