{"metadata": {"vulnerability": "CVE-2026-85889", "count": 31, "kinds": {"milestone": 4, "sighting": 18, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-04T18:18:19.328Z", "date_only": false, "value": "2026-09-04T18:18:19.328Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85889", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-17T14:00:00Z", "date_only": false, "value": "2026-09-17T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2026-85889", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-17T22:55:58.597Z", "date_only": false, "value": "2026-09-17T22:55:58.597Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85889", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-17T23:18:53Z", "date_only": false, "value": "2026-09-17T23:18:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4Q27-2GV2-3VM4", "record": "GHSA-4Q27-2GV2-3VM4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-17T23:18:53.217Z", "date_only": false, "value": "2026-09-17T23:18:53.217", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85889", "record": "FKIE_CVE-2026-85889", "field": "published"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": false, "value": "2026-09-18T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85889", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": false, "value": "2026-09-18T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85889", "record": "FKIE_CVE-2026-85889", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-18T00:00:37.450Z", "date_only": false, "value": "2026-09-18T00:00:37.450987Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117289099899956487", "record": "cve-2026-85889", "field": "creation_timestamp", "uuid": "5f2013c7-4151-465b-872f-b31684326d88", "content": "CVE-2026-85889 | CRITICAL flaw in Azure AI Foundry: missing authentication for a critical function (CVSS 10) allows remote privilege escalation. Microsoft patched this cloud vulnerability \u2014 verify your environment per MSRC: https://radar.offseq.com/threat/cve-2026-85889-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-ai-foundry-e4d903ee0861658f #OffSeq #Azure #Infosec #CVE202685889", "url": "https://infosec.exchange/users/offseq/statuses/117289099899956487"}, {"timestamp": "2026-09-18T00:00:37.773Z", "date_only": false, "value": "2026-09-18T00:00:37.773542Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvqufkqbrw2y", "record": "cve-2026-85889", "field": "creation_timestamp", "uuid": "ca35877f-faf9-4f40-a768-bb62f44fcfdc", "content": "CVE-2026-85889: CRITICAL in Azure AI Foundry \u2014 missing authentication enables remote privilege escalation (CVSS 10). Microsoft patched server-side \u2014 confirm your environment is secure: https://radar.offseq.com/threat/cve-2026-85889-cwe-306-missing-authentication-for-critical-function-in-microsoft...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvqufkqbrw2y"}, {"timestamp": "2026-09-18T00:09:23.148Z", "date_only": false, "value": "2026-09-18T00:09:23.148134Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvquv7zptq2g", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "f1e1daa2-216a-470a-8db2-0413f0317796", "content": "\ud83d\udea8 CVE-2026-85889 \u2014 CVSS 10 CRITICAL\n\nMissing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85889\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvquv7zptq2g"}, {"timestamp": "2026-09-18T00:31:09Z", "date_only": false, "value": "2026-09-18T00:31:09Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4Q27-2GV2-3VM4", "record": "GHSA-4Q27-2GV2-3VM4", "field": "published"}, {"timestamp": "2026-09-18T00:31:09Z", "date_only": false, "value": "2026-09-18T00:31:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4Q27-2GV2-3VM4", "record": "GHSA-4Q27-2GV2-3VM4", "field": "modified"}, {"timestamp": "2026-09-18T02:50:05.585Z", "date_only": false, "value": "2026-09-18T02:50:05.585472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr5ulmhaj2g", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "3f79492a-06a6-44be-9891-9d3cd154f81b", "content": "CVE-2026-85889 - azure ai foundry\nAzure AI Foundry does not check who is using a key function, so someone on the network who should not have permission can raise their rights to act like an administrator. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr5ulmhaj2g"}, {"timestamp": "2026-09-18T05:02:28.967Z", "date_only": false, "value": "2026-09-18T05:02:28.967880Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvrfbdbiac2y", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "e3429583-21af-4c4c-86a5-1a25378ec98b", "content": "Daily IT Security Digest \u2014 2026-09-18\ninput in $dataType, $part, and $unit parameters.\n- **D-Link DI-8300 RCE** (CVE-2026-91003): Stack buffer overflow in /rzgl.asp enables remote code execution; public exploit code is available.\n- **Azure AI Foundry Privilege Escalation** (CVE-2026-85889): Missing", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mvrfbdbiac2y"}, {"timestamp": "2026-09-18T14:02:58.036Z", "date_only": false, "value": "2026-09-18T14:02:58.036504Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvsdhrgtvx2v", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "f8fa74cc-9b41-41f6-8b68-d585126910bf", "content": "Microsoft fixed a maximum-severity Azure AI Foundry flaw (CVE-2026-85889, CVSS 10.0) enabling privilege escalation without authentication; no customer action is required.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvsdhrgtvx2v"}, {"timestamp": "2026-09-18T14:05:29.725Z", "date_only": false, "value": "2026-09-18T14:05:29.725568Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvsdmc4zxn2v", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "6f5d3ca6-6db1-4575-b7d0-6129e8fcac47", "content": "Microsoft fixed a maximum-severity Azure AI Foundry flaw (CVE-2026-85889, CVSS 10.0) enabling privilege escalation without authentication; no customer action is required.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mvsdmc4zxn2v"}, {"timestamp": "2026-09-18T14:05:37.190Z", "date_only": false, "value": "2026-09-18T14:05:37.190641Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvsdmj777q2l", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "6caf82ed-62b8-4ecc-8b98-53a16ed5b6a5", "content": "Microsoft fixed a maximum-severity Azure AI Foundry flaw (CVE-2026-85889, CVSS 10.0) enabling privilege escalation without authentication; no customer action is required.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvsdmj777q2l"}, {"timestamp": "2026-09-18T14:52:28.861Z", "date_only": false, "value": "2026-09-18T14:52:28.861980Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3mvsgacai3r2t", "record": "cve-2026-85889", "field": "creation_timestamp", "uuid": "e98815d3-1b56-4f8f-b433-3c4d7d4138a5", "content": "Microsoft corrige fallo cr\u00edtico en Azure AI Foundry con CVE-2026-85889\n\nUn fallo de autenticaci\u00f3n en Azure AI Foundry permite escalada de privilegios\u2026\n\nhttps://mentehackers.com/microsoft-corrige-fallo-critico-en-azure-ai-foundry-con-cve-2026-85889-baffdffe\n#Ciberseguridad #IA #Tecnologia", "url": "https://bsky.app/profile/mentedehackers.bsky.social/post/3mvsgacai3r2t"}, {"timestamp": "2026-09-18T15:24:22.362Z", "date_only": false, "value": "2026-09-18T15:24:22.362963Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvshzdz4m62u", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "190a51aa-8b4d-4121-b5ea-02c617040af4", "content": "\ud83e\udd16 CVE-2026-85889 (CVSS 10.0): missing authentication in Azure AI Foundry lets an unauthenticated attacker elevate privileges over the network. Patched, no customer action required.\n\nhttps://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mvshzdz4m62u"}, {"timestamp": "2026-09-18T15:40:58.836Z", "date_only": false, "value": "2026-09-18T15:40:58.836191Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117292797631774094", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "94461230-db26-4079-ad52-c3420a60843f", "content": "If you missed this, Microsoft patched this vulnerability yesterday:\nCVE-2026-85889: Azure AI Foundry Elevation of Privilege Vulnerability (new) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85889\nMore:\nThe Hacker News: Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html @thehackernews #infosec #vulnerability #Microsoft #Azure", "url": "https://infosec.exchange/users/AAKL/statuses/117292797631774094"}, {"timestamp": "2026-09-18T16:00:37.313Z", "date_only": false, "value": "2026-09-18T16:00:37.313391Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "fd360d7c-149f-42cf-b82d-a9bc8f9078cc", "content": "Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required.\n\nThe vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0.\n\n\"Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network,\"", "url": "https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html"}, {"timestamp": "2026-09-18T16:18:12.584Z", "date_only": false, "value": "2026-09-18T16:18:12.584001Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvskzm6hyi23", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "88359570-eade-46c5-822c-a1a60de97113", "content": "Azure AI Foundry \u306b\u8a8d\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027 (CVE-2026-85889) \u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u6a29\u9650\u6607\u683c\u304c\u53ef\u80fd\u3002\u4fee\u6b63\u6e08\u307f\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mvskzm6hyi23"}, {"timestamp": "2026-09-18T18:00:06.721Z", "date_only": false, "value": "2026-09-18T18:00:06.721620Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Zwhpyrr_oHIPZkOmsbpRS6DJea6Ieye3YqU8trO1W22uDg", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "31a6337a-e340-4134-9e18-b721d1c7e7a4"}, {"timestamp": "2026-09-19T03:56:30.125Z", "date_only": false, "value": "2026-09-19T03:56:30.125Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85889", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-19T12:05:30.463Z", "date_only": false, "value": "2026-09-19T12:05:30.463876Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/serena666.bsky.social/post/3mvunenjeeh2b", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "69f50d0a-447f-4c6b-87de-311d79d604d3", "content": "Wild to see a CVSS 10.0 flaw in Azure AI Foundry, CVE-2026-85889, due to missing auth. This proves even foundational AI platforms aren't immune to basic security oversights. We gotta harden our stacks from the ground up.", "url": "https://bsky.app/profile/serena666.bsky.social/post/3mvunenjeeh2b"}, {"timestamp": "2026-09-19T18:00:27.965Z", "date_only": false, "value": "2026-09-19T18:00:27.965916Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mvvb7eid2q2g", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "ad0bab3f-468e-4ed8-97dd-208b0338d0a0", "content": "CVE-2026-85889 Azure AI Foundry fix was server-side; Atlas 8 sleep leaves fans on; AM5 AGESA 1.3.0.1d beta targets CXMT DDR5; RX 9070 XT: don't reuse modular PSU leads; 29617\u219229639 SAFE_OS 0x80070057 (2 replies). +21 stories, 30 joined", "url": "https://bsky.app/profile/windowsforum.com/post/3mvvb7eid2q2g"}, {"timestamp": "2026-09-19T18:01:15.686Z", "date_only": false, "value": "2026-09-19T18:01:15.686331Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvvbasiogw2c", "record": "cve-2026-85889", "field": "creation_timestamp", "uuid": "7e0397aa-d039-4821-ac61-b144ea79cfc9", "content": "Microsoft fixed a missing-auth flaw in Azure AI Foundry \u2014 CVSS 10.0, unauthenticated privilege escalation\u2026 https://0daynews.com/articles/2026-09-19-azure-ai-foundry-cve-2026-85889-cvss10-privilege-escalation/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2610", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3mvvbasiogw2c"}, {"timestamp": "2026-09-23T07:20:07.095Z", "date_only": false, "value": "2026-09-23T07:20:07.095147Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yayafa.bsky.social/post/3mw67bzq5bc25", "record": "CVE-2026-85889", "field": "creation_timestamp", "uuid": "9b8e8432-c83c-4a8b-8b69-829da5690612", "content": "Microsoft\u3001Azure\u30fbCopilot\u306a\u306918\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63 7\u4ef6\u304cCVSS 10.0\u3001\u9867\u5ba2\u5074\u306e\u66f4\u65b0\u4f5c\u696d\u306f\u4e0d\u8981(CVE-2026-85889)\u4ed6|\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab\n\nhttps://www.yayafa.com/2893440/\n\nMicrosoft\u306f2026\u5e749\u67081\u2026", "url": "https://bsky.app/profile/yayafa.bsky.social/post/3mw67bzq5bc25"}, {"timestamp": "2026-09-25T14:31:39.617Z", "date_only": false, "value": "2026-09-25T14:31:39.617", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85889", "record": "FKIE_CVE-2026-85889", "field": "lastModified"}, {"timestamp": "2026-10-14T23:05:43.379Z", "date_only": false, "value": "2026-10-14T23:05:43.379Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85889", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T23:05:43.379Z", "date_only": false, "value": "2026-10-14T23:05:43.379Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2026-85889", "field": "containers.cna.providerMetadata.dateUpdated"}]}