NCSC-2026-0142

Vulnerability from csaf_ncscnl - Published: 2026-05-12 17:53 - Updated: 2026-05-12 17:53
Summary
Kwetsbaarheden verholpen in Microsoft Azure
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten.
Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en mogelijk daarmee toegang te krijgen tot gevoelige gegevens. De kwetsbaarheden met kenmerk CVE-2026-40379, CVE-2026-32207, CVE-2026-33109, CVE-2026-33844, CVE-2026-34327, CVE-2026-35428, CVE-2026-35435 en CVE-2026-41105 zijn reeds centraal verholpen door Microsoft en slechts opgenomen ter informatie. Voor deze kwetsbaarheden zijn geen acties benodigd. ``` Azure Machine Learning: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-32207 | 8.80 | Voordoen als andere gebruiker | | CVE-2026-33833 | 8.20 | Voordoen als andere gebruiker | |----------------|------|-------------------------------------| Azure Monitor Agent: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-32204 | 7.80 | Verkrijgen van verhoogde rechten | | CVE-2026-42830 | 6.50 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Microsoft Partner Center: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-34327 | 8.20 | Voordoen als andere gebruiker | |----------------|------|-------------------------------------| Azure Connected Machine Agent: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-40381 | 7.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Azure SDK: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-33117 | 9.10 | Omzeilen van beveiligingsmaatregel | |----------------|------|-------------------------------------| Microsoft SSO Plugin for Jira & Confluence: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-41103 | 9.10 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Azure Notification Service: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-41105 | 8.10 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Azure Logic Apps: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-42823 | 9.90 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Azure Entra ID: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-40379 | 9.30 | Voordoen als andere gebruiker | |----------------|------|-------------------------------------| Windows Admin Center: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-41086 | 8.80 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Azure AI Foundry M365 published agents: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-35435 | 8.60 | Verkrijgen van verhoogde rechten | |----------------|------|-------------------------------------| Azure Cloud Shell: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-35428 | 9.60 | Voordoen als andere gebruiker | |----------------|------|-------------------------------------| Azure Managed Instance for Apache Cassandra: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-33109 | 9.90 | Uitvoeren van willekeurige code | | CVE-2026-33844 | 9.00 | Uitvoeren van willekeurige code | |----------------|------|-------------------------------------| ```
Oplossingen: Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op: https://portal.msrc.microsoft.com/en-us/security-guidance
Kans: medium
Schade: high
CWE-20: Improper Input Validation
CWE-73: External Control of File Name or Path
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-284: Improper Access Control
CWE-287: Improper Authentication
CWE-303: Incorrect Implementation of Authentication Algorithm
CWE-347: Improper Verification of Cryptographic Signature
CWE-426: Untrusted Search Path
CWE-610: Externally Controlled Reference to a Resource in Another Sphere
CWE-918: Server-Side Request Forgery (SSRF)
CVE-2026-40379

Exposure of sensitive information in Azure Entra ID can allow unauthorized attackers to conduct network spoofing attacks, potentially compromising network integrity and security.

9.3 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-32207

A cross-site scripting vulnerability in Azure Machine Learning allows unauthorized attackers to perform network spoofing by improper input neutralization during web page generation.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-33833

An injection vulnerability in Azure Machine Learning due to improper neutralization of special elements in output enables unauthorized attackers to perform network spoofing.

8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-33109

An improper access control vulnerability in Azure Managed Instance for Apache Cassandra allows an authorized attacker to remotely execute code over a network, posing significant security risks.

9.9 (Critical)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-33844

An improper input validation vulnerability in Azure Managed Instance for Apache Cassandra allows an authorized attacker to remotely execute code over a network.

9.0 (Critical)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-32204

An external control of file name or path vulnerability in Azure Monitor Agent enables an authorized attacker to perform local privilege escalation.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CWE-73 - External Control of File Name or Path
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-33117

An improper authentication vulnerability in the Azure SDK allows unauthorized attackers to bypass security features over a network, potentially compromising system integrity.

9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-41086

An improper access control vulnerability in Windows Admin Center allows an authorized attacker to elevate privileges over a network, potentially compromising system integrity.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-40381

An improper access control vulnerability in the Azure Connected Machine Agent allows an authorized local attacker to elevate privileges on the affected system.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-41103

An incorrect implementation of the authentication algorithm in the Microsoft SSO Plugin for Jira and Confluence enables unauthorized attackers to elevate privileges over a network.

9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
CWE-303 - Incorrect Implementation of Authentication Algorithm
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-42823

Improper access control in Azure Logic Apps allows an authorized attacker to escalate privileges within a network environment, potentially compromising system integrity.

9.9 (Critical)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-42830

An untrusted search path vulnerability in Azure Monitor Agent allows an authorized local attacker to elevate privileges by exploiting improper path validation.

6.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C
CWE-426 - Untrusted Search Path
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-34327

An externally controlled reference to a resource in another sphere within Microsoft Partner Center enables an unauthorized attacker to perform network spoofing.

8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-35428

Improper neutralization of special elements in commands within Azure Cloud Shell allows unauthorized attackers to perform network spoofing attacks.

9.6 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-35435

Improper access control in Azure AI Foundry M365 published agents allows unauthorized attackers to elevate privileges over a network, posing significant security risks.

8.6 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
CVE-2026-41105

A server-side request forgery (SSRF) vulnerability in Azure Notification Service allows an authorized attacker to escalate privileges within a network, potentially compromising internal resources.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Product Identifier Version Remediation
vers:unknown/*
Microsoft / Azure
 vers:unknown/*
vers:unknown/*
Microsoft / Azure AI Foundry
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Cloud Shell
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Connected Machine Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Logic Apps
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Machine Learning
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Managed Instance for Apache Cassandra
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Action Group notification system
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent
 vers:unknown/*
vers:unknown/*
Microsoft / Azure Monitor Agent Metrics Extension
 vers:unknown/*
vers:unknown/*
Microsoft / Azure SDK for Java
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Confluence SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Enterprise Security Token Service (ESTS)
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft JIRA SAML SSO plugin
 vers:unknown/*
vers:unknown/*
Microsoft / Microsoft Partner Center
 vers:unknown/*
vers:unknown/*
Microsoft / Windows Admin Center in Azure Portal
 vers:unknown/*
References
To clipboard 

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en mogelijk daarmee toegang te krijgen tot gevoelige gegevens.\n\nDe kwetsbaarheden met kenmerk CVE-2026-40379, CVE-2026-32207, CVE-2026-33109, CVE-2026-33844, CVE-2026-34327, CVE-2026-35428, CVE-2026-35435 en CVE-2026-41105 zijn reeds centraal verholpen door Microsoft en slechts opgenomen ter informatie. Voor deze kwetsbaarheden zijn geen acties benodigd.\n\n```\nAzure Machine Learning: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32207 | 8.80 | Voordoen als andere gebruiker       | \n| CVE-2026-33833 | 8.20 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32204 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42830 | 6.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Partner Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34327 | 8.20 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Connected Machine Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40381 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33117 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft SSO Plugin for Jira \u0026 Confluence: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41103 | 9.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Notification Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41105 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Logic Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42823 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Entra ID: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40379 | 9.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41086 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure AI Foundry M365 published agents: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35435 | 8.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Cloud Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35428 | 9.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Managed Instance for Apache Cassandra: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33109 | 9.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-33844 | 9.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "External Control of File Name or Path",
        "title": "CWE-73"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
        "title": "CWE-74"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
        "title": "CWE-77"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
        "title": "CWE-79"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Improper Authentication",
        "title": "CWE-287"
      },
      {
        "category": "general",
        "text": "Incorrect Implementation of Authentication Algorithm",
        "title": "CWE-303"
      },
      {
        "category": "general",
        "text": "Improper Verification of Cryptographic Signature",
        "title": "CWE-347"
      },
      {
        "category": "general",
        "text": "Untrusted Search Path",
        "title": "CWE-426"
      },
      {
        "category": "general",
        "text": "Externally Controlled Reference to a Resource in Another Sphere",
        "title": "CWE-610"
      },
      {
        "category": "general",
        "text": "Server-Side Request Forgery (SSRF)",
        "title": "CWE-918"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "title": "Kwetsbaarheden verholpen in Microsoft Azure",
    "tracking": {
      "current_release_date": "2026-05-12T17:53:04.881874Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0142",
      "initial_release_date": "2026-05-12T17:53:04.881874Z",
      "revision_history": [
        {
          "date": "2026-05-12T17:53:04.881874Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure AI Foundry"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-3"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Cloud Shell"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-4"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Connected Machine Agent"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-5"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Logic Apps"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-6"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Machine Learning"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-7"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Managed Instance for Apache Cassandra"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-8"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Monitor Action Group notification system"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-9"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Monitor Agent"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-10"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Monitor Agent Metrics Extension"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-11"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure SDK for Java"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-12"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Confluence SAML SSO plugin"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-13"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Enterprise Security Token Service (ESTS)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-14"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft JIRA SAML SSO plugin"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-15"
                }
              }
            ],
            "category": "product_name",
            "name": "Microsoft Partner Center"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-16"
                }
              }
            ],
            "category": "product_name",
            "name": "Windows Admin Center in Azure Portal"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-40379",
      "notes": [
        {
          "category": "description",
          "text": "Exposure of sensitive information in Azure Entra ID can allow unauthorized attackers to conduct network spoofing attacks, potentially compromising network integrity and security.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-40379 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-40379.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-40379"
    },
    {
      "cve": "CVE-2026-32207",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
          "title": "CWE-79"
        },
        {
          "category": "description",
          "text": "A cross-site scripting vulnerability in Azure Machine Learning allows unauthorized attackers to perform network spoofing by improper input neutralization during web page generation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-32207 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-32207.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-32207"
    },
    {
      "cve": "CVE-2026-33833",
      "notes": [
        {
          "category": "description",
          "text": "An injection vulnerability in Azure Machine Learning due to improper neutralization of special elements in output enables unauthorized attackers to perform network spoofing.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-33833 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-33833.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-33833"
    },
    {
      "cve": "CVE-2026-33109",
      "notes": [
        {
          "category": "description",
          "text": "An improper access control vulnerability in Azure Managed Instance for Apache Cassandra allows an authorized attacker to remotely execute code over a network, posing significant security risks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-33109 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-33109.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-33109"
    },
    {
      "cve": "CVE-2026-33844",
      "notes": [
        {
          "category": "description",
          "text": "An improper input validation vulnerability in Azure Managed Instance for Apache Cassandra allows an authorized attacker to remotely execute code over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-33844 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-33844.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-33844"
    },
    {
      "cve": "CVE-2026-32204",
      "cwe": {
        "id": "CWE-73",
        "name": "External Control of File Name or Path"
      },
      "notes": [
        {
          "category": "other",
          "text": "External Control of File Name or Path",
          "title": "CWE-73"
        },
        {
          "category": "description",
          "text": "An external control of file name or path vulnerability in Azure Monitor Agent enables an authorized attacker to perform local privilege escalation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-32204 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-32204.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-32204"
    },
    {
      "cve": "CVE-2026-33117",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Verification of Cryptographic Signature",
          "title": "CWE-347"
        },
        {
          "category": "description",
          "text": "An improper authentication vulnerability in the Azure SDK allows unauthorized attackers to bypass security features over a network, potentially compromising system integrity.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-33117 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-33117.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-33117"
    },
    {
      "cve": "CVE-2026-41086",
      "notes": [
        {
          "category": "description",
          "text": "An improper access control vulnerability in Windows Admin Center allows an authorized attacker to elevate privileges over a network, potentially compromising system integrity.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-41086 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-41086.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-41086"
    },
    {
      "cve": "CVE-2026-40381",
      "notes": [
        {
          "category": "description",
          "text": "An improper access control vulnerability in the Azure Connected Machine Agent allows an authorized local attacker to elevate privileges on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-40381 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-40381.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-40381"
    },
    {
      "cve": "CVE-2026-41103",
      "cwe": {
        "id": "CWE-303",
        "name": "Incorrect Implementation of Authentication Algorithm"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Implementation of Authentication Algorithm",
          "title": "CWE-303"
        },
        {
          "category": "description",
          "text": "An incorrect implementation of the authentication algorithm in the Microsoft SSO Plugin for Jira and Confluence enables unauthorized attackers to elevate privileges over a network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-41103 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-41103.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-41103"
    },
    {
      "cve": "CVE-2026-42823",
      "notes": [
        {
          "category": "description",
          "text": "Improper access control in Azure Logic Apps allows an authorized attacker to escalate privileges within a network environment, potentially compromising system integrity.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-42823 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-42823.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-42823"
    },
    {
      "cve": "CVE-2026-42830",
      "cwe": {
        "id": "CWE-426",
        "name": "Untrusted Search Path"
      },
      "notes": [
        {
          "category": "other",
          "text": "Untrusted Search Path",
          "title": "CWE-426"
        },
        {
          "category": "description",
          "text": "An untrusted search path vulnerability in Azure Monitor Agent allows an authorized local attacker to elevate privileges by exploiting improper path validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-42830 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-42830.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-42830"
    },
    {
      "cve": "CVE-2026-34327",
      "notes": [
        {
          "category": "description",
          "text": "An externally controlled reference to a resource in another sphere within Microsoft Partner Center enables an unauthorized attacker to perform network spoofing.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-34327 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-34327.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-34327"
    },
    {
      "cve": "CVE-2026-35428",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
          "title": "CWE-77"
        },
        {
          "category": "description",
          "text": "Improper neutralization of special elements in commands within Azure Cloud Shell allows unauthorized attackers to perform network spoofing attacks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-35428 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-35428.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-35428"
    },
    {
      "cve": "CVE-2026-35435",
      "notes": [
        {
          "category": "description",
          "text": "Improper access control in Azure AI Foundry M365 published agents allows unauthorized attackers to elevate privileges over a network, posing significant security risks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-35435 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-35435.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-35435"
    },
    {
      "cve": "CVE-2026-41105",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Server-Side Request Forgery (SSRF)",
          "title": "CWE-918"
        },
        {
          "category": "description",
          "text": "A server-side request forgery (SSRF) vulnerability in Azure Notification Service allows an authorized attacker to escalate privileges within a network, potentially compromising internal resources.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5",
          "CSAFPID-6",
          "CSAFPID-7",
          "CSAFPID-8",
          "CSAFPID-9",
          "CSAFPID-10",
          "CSAFPID-11",
          "CSAFPID-12",
          "CSAFPID-13",
          "CSAFPID-14",
          "CSAFPID-15",
          "CSAFPID-16"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-41105 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-41105.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5",
            "CSAFPID-6",
            "CSAFPID-7",
            "CSAFPID-8",
            "CSAFPID-9",
            "CSAFPID-10",
            "CSAFPID-11",
            "CSAFPID-12",
            "CSAFPID-13",
            "CSAFPID-14",
            "CSAFPID-15",
            "CSAFPID-16"
          ]
        }
      ],
      "title": "CVE-2026-41105"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.