CVE-2026-85878 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.9 CRITICAL	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 44.79%

Common Weakness Enumeration

CWE-285 - Improper Authorization
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Vulnerability Media Exposure

[ENGLISH] Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0. "Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network,"
Published: 2026-09-18T18:17:04+05:30
[GERMAN] Microsoft Azure: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure, Microsoft Azure Cosmos DB, Microsoft Entra und Microsoft Azure CLI ausnutzen, um seine Privilegien zu erhöhen, um falsche Informationen darzustellen, um Informationen offenzulegen und um beliebigen Programmcode auszuführen.
Published: 2026-09-17T22:00:00+00:00

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85878