Skip to content
OpenAdvisories

Vendor

Azure

10 known vulnerabilities.

Products

azure-uamqp-c 3 kafka-sink-azure-kusto 1 azure-c-shared-utility 1 ipam 1 go-ntlmssp 1 aad-pod-identity 1 setup-kubectl 1 azure-cli 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-42316

    KQL injection via kusto.tables.topics.mapping in kafka-sink-azure-kusto

    kafka-sink-azure-kusto Kafka Connect plugin is the official Microsoft sink for Azure Data Explorer (Kusto). Prior to 5.2.3, kafka-sink-azure-kusto did not sanitize user-controlled values inside the kusto.tables.topics.mapping configuration. The db, table, map…

    Azure kafka-sink-azure-kusto
  • Medium 5.3
    CVE-2026-32952

    go-ntlmssp NTLM challenges can panic on malformed payloads

    go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transpor…

    Azure go-ntlmssp rclone golang-github-azure-go-ntlmssp Debian Ubuntu Alpine Go
  • Medium 6.0
    CVE-2024-29195

    Azure C SDK Integer Wraparound Vulnerability

    The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocati…

    Azure azure-c-shared-utility azure-uamqp-python azure-uamqp-python Debian Ubuntu
  • Medium 5.3
    CVE-2022-23551

    AAD Pod Identity obtaining token with backslash

    aad-pod-identity assigns Azure Active Directory identities to Kubernetes applications and has now been deprecated as of 24 October 2022. The NMI component in AAD Pod Identity intercepts and validates token requests based on regex. In this case, a token reques…

    Azure aad-pod-identity github.com/Azure/aad-pod-identity Go