Skip to content
OpenAdvisories
High WID-SEC-2026-0794 3 CVEs

Microsoft Azure DevOps, Data Factory and Cloud Shell: Mehrere Schwachstellen

Published Mar 19, 2026 · Updated Mar 19, 2026 · de-DE

Vendor: Microsoft Product: Azure Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Azure DevOps, Data Factory und Cloud Shell ausnutzen, um seine Privilegien zu erhöhen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.

Product

Azure ist eine Cloud Computing-Plattform von Microsoft.

Vulnerabilities 3

  • Critical 10.0
    CVE-2026-32169

    Azure Cloud Shell Elevation of Privilege Vulnerability

    Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure Cloud Shell
  • High 8.6
    CVE-2026-23658

    Azure DevOps: msazure Elevation of Privilege Vulnerability

    Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure DevOps: msazure
  • High 8.6
    CVE-2026-23659

    Azure Data Factory Information Disclosure Vulnerability

    Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network.

    Microsoft Azure Data Factory

Revision history

  1. #1

    Initiale Fassung

References