Skip to content
OpenAdvisories
High MSRC-CVE-2026-21528 1 CVE

Azure IoT Explorer Information Disclosure Vulnerability

Published Feb 10, 2026 · Updated Feb 19, 2026 · Revision 2

Vendor: Microsoft

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes the contents of the user’s local file system, folders or potentially cloud access credentials associated with the system.

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?
An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).

Security updates
0.15.13 — https://github.com/Azure/azure-iot-explorer/releases/tag/v0.15.13

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-21528

    Azure IoT Explorer Information Disclosure Vulnerability

    Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

    Microsoft Azure IoT Explorer

Revision history

  1. #2

    Corrected the CVE description and title. This is an informational change only.

  2. #1

    Information published.

References