CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

CVE-2026-68823: Azure Confidential Ledger Remote Code Execution Vulnerability

criticalCVSS 9.1CVE-2026-68823
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

CSIRTS triage

vendor: Microsoftproduct: Azure Confidential LedgerRemote code execution
What
Exposed dangerous method or function allows authorized attackers to execute code over the network.
Who is affected
Deployments of Azure Confidential Ledger are affected.
Urgency
Critical severity (CVSS 9.1); not yet exploited but requires immediate remediation.
Action
Apply the latest security patch from Microsoft for Azure Confidential Ledger.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Azure Confidential Ledger

Get an email when a new Azure Confidential Ledger advisory drops — max one per day, one-click unsubscribe.

Details

Source
Microsoft Security Response Center (INTL · vendor-psirt · site)
Severity
critical — CVSS 9.1
Published
2026-08-06
Exploitation
Not in CISA KEV at last sync

Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68823

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-68823coverage & exploitation statusNVD · CVE.org

More from Microsoft Security Response Center