Vulnerabilities

CVSS

10.0 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Risk score

80.0

Published

2026-07-30

Status

Published

Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.

Weaknesses

CWE-284

Coverage 1

vulnerability

Vulnérabilité dans Microsoft Azure (31 juillet 2026)

A critical vulnerability has been identified in Microsoft Azure's Cosmos DB, allowing attackers to execute arbitrary code remotely. This could lead to significant data compromise and system control for malicious actors.

CERT-FR · Jul 31, 2026 Critical

CVE-2026-66803azureremote code executiondatabase

All articles mentioning it

Advisories and references

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66803