Skip to content
OpenAdvisories
High WID-SEC-2026-1649 5 CVEs

Microsoft Azure: Mehrere Schwachstellen

Published May 21, 2026 · Updated May 25, 2026 · Revision 2 · de-DE

Vendor: Microsoft Product: Azure Product: Azure Stack Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure und Microsoft Azure Stack ausnutzen, um Informationen offenzulegen, erweiterte Privilegien zu erlangen oder beliebigen Code auszuführen.

Product

Azure ist eine Cloud Computing-Plattform von Microsoft.
Azure Stack ist ein Microsoft-Produkt aus der Azure-Familie. Mit Azure Stack können die Public-Cloud-Services von Microsoft auch im eigenen Rechenzentrum betrieben werden.

Vulnerabilities 5

  • Critical 10.0
    CVE-2026-40412

    Azure Orbital Spatio Remote Code Execution Vulnerability

    Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.

    Microsoft Azure Orbital Spatio
  • Critical 9.9
    CVE-2026-40411

    Azure Virtual Network Gateway Remote Code Execution Vulnerability

    Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.

    Microsoft Azure Virtual Network Gateway
  • Critical 9.1
    CVE-2026-33843

    Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

    Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Microsoft Entra
  • High 8.8
    CVE-2026-35430

    Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability

    Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges over a network.

    Microsoft Azure Privileged Identity Management (PIM)
  • High 7.7
    CVE-2026-26147

    Azure Stack HCI Information Disclosure Vulnerability

    Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.

    Microsoft Azure Stack HCI

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-31510, EUVD-2026-31511, EUVD-2026-31509, EUVD-2026-31519, EUVD-2026-31516

  2. #1

    Initiale Fassung

References