CWE-74

Critical Azure Cosmos DB Downstream Injection Flaw Enabled Cloud Privilege Escalation CVE-2026-87701

Microsoft addresses CVSS 9.6 vulnerability CVE-2026-87701 in Azure Cosmos DB allowing authenticated attackers to execute downstream injection and elevate privileges.