Topic

Microsoft Azure: news, advisories and analysis

13 articlesUpdated 13 Oct 2026

CyberSecureToday covers Microsoft Azure across 13 articles published between 16 Sep 2026 and 13 Oct 2026. The coverage includes 10 vulnerability advisories and 3 analysis or guidance pieces. 10 advisories are rated critical or high severity.

Stories on Microsoft Azure most often intersect with Privilege Escalation, Cloud Security and MSRC, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Azure Arc Connected Machine Agent Local Privilege Escalation Flaw CVE-2026-83711 Enables Host Compromise”, was published 13 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
Azure Arc Connected Machine Agent Local Privilege Escalation Flaw CVE-2026-83711 Enables Host Compromise
Microsoft addresses a critical privilege escalation flaw in Azure Arc Connected Machine Agent (CVE-2026-83711) exposing Hybrid Instance Metadata Service tokens.
Aisha Noor13 Oct 20268 min read
ThreatsCloud & SaaSHigh
Microsoft Azure Container Apps Dapr Sidecar Token Impersonation Flaw Enables Internal Microservice Hijacking (CVE-2026-58204)
Microsoft MSRC publishes a security bulletin detailing an identity impersonation flaw in Azure Container Apps Dapr sidecars allowing cross-service token spoofing.
CST Editorial Desk9 Oct 20268 min read
ThreatsCloud & SaaSHigh
Azure Monitor Agent Untrusted Search Path Flaw Enables Local Privilege Escalation CVE-2026-42830
Microsoft MSRC bulletin details an untrusted search path vulnerability in Azure Monitor Agent Metrics Extension allowing low-privileged users to attain SYSTEM privileges.
Aisha Noor27 Sep 20268 min read
ThreatsCloud & SaaSCritical
Azure AI Language Authentication Flaw Enables Unauthenticated Model Tampering
Microsoft mitigates maximum-severity CVSS 10.0 flaw CVE-2026-70352 in Azure AI Language Authoring, preventing unauthenticated remote tampering with enterprise AI models.
CST Editorial Desk24 Sep 202617 min read
ThreatsCloud & SaaSHigh
Azure AI Foundry Server-Side Request Forgery Flaw Exposes Internal Agent Infrastructure CVE-2026-85917
Microsoft discloses high-severity flaw CVE-2026-85917 in Azure AI Foundry allowing unauthenticated attackers to execute SSRF and elevate privileges over the network.
CST Editorial Desk23 Sep 202615 min read
ThreatsCloud & SaaSCritical
Azure Cosmos DB Injection Flaw Enabled Cloud Privilege Escalation
Microsoft addresses CVSS 9.6 vulnerability CVE-2026-87701 in Azure Cosmos DB allowing authenticated attackers to execute downstream injection and elevate privileges.
CST Editorial Desk23 Sep 202615 min read
ThreatsCloud & SaaSHigh
Microsoft Azure CLI Command Injection Vulnerability CVE-2026-83948 Exposes Cloud CI/CD Automation Runners
Microsoft patches important command injection flaw CVE-2026-83948 in Azure CLI, requiring customer updates to prevent remote code execution in CI/CD pipelines.
Aisha Noor22 Sep 202614 min read
ThreatsCloud & SaaSCritical
Azure HorizonDB Critical Flaw CVE-2026-48567 Allows Complete Authentication Bypass via Token Spoofing
Microsoft resolves maximum-severity CVSS 10.0 vulnerability CVE-2026-48567 in Azure HorizonDB allowing network attackers to bypass authentication and seize cluster control.
Aisha Noor21 Sep 202615 min read
ThreatsCloud & SaaSHigh
Azure Connected Machine Agent Flaw CVE-2026-47632 Enables Local Privilege Escalation Across Hybrid Server Workloads
Microsoft patches high-severity flaw CVE-2026-47632 in Azure Connected Machine Agent allowing local privilege escalation on Azure Arc hybrid endpoints.
Mei-Lin Chen21 Sep 202613 min read
ThreatsCloud & SaaSCritical
Microsoft Azure Active Directory B2C Authentication Bypass Flaw Enables Remote Privilege Escalation
Microsoft fixes critical CVSS 9.1 flaw CVE-2026-33843 in Azure AD B2C and Microsoft Entra ID allowing unauthenticated network attackers to elevate privileges.
Mei-Lin Chen20 Sep 202614 min read
InsightsCloud & SaaS
Microsoft Resolves CVSS 10.0 Azure AI Foundry Authentication Bypass and Privilege Escalation Flaw
Microsoft patches maximum-severity CVSS 10.0 flaw CVE-2026-85889 in Azure AI Foundry enabling unauthenticated remote network privilege escalation.
Aisha Noor18 Sep 202612 min read
InsightsCloud & SaaS
Azure Security Advisory: Cloud Foundry BOSH CPI Stemcell Code Injection Flaw Dissected
Technical analysis of Azure Cloud Provider Interface vulnerability CVE-2017-4964 enabling arbitrary code injection into virtual machines during deployment.
Mei-Lin Chen18 Sep 202610 min read
InsightsCloud & SaaS
Cloud Workload Security: BOSH Azure & AWS Microservice Stemcell Privilege Escalation Analysis
Technical breakdown of cloud workload stemcell isolation defects, container escape vectors, and hypervisor boundary hardening across AWS and Microsoft Azure.
Mei-Lin Chen16 Sep 202612 min read