[NEW] [high] Microsoft Azure and Entra ID: Multiple vulnerabilities

CSIRTS triage

What

Multiple vulnerabilities in Microsoft Azure and Entra ID enable privilege escalation, information disclosure, false information presentation, and code execution.

Who is affected

Users and deployments of Azure and Entra ID services are affected.

Urgency

High priority; multiple critical vulnerability classes affecting core identity and cloud infrastructure.

Action

Apply all available Microsoft security updates for Azure and Entra ID services immediately.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

CERT-Bund (BSI) Security Advisories (DE · national-cert · site)

Severity

high

Published

2026-08-12

Exploitation

Not in CISA KEV at last sync

Language

Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2779

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-505160.84% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 56% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-504810.56% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 45% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-628690.82% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 55% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-561610.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 39% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-656680.52% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 42% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-628300.52% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 42% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-472990.94% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 59% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-491630.75% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 53% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-591150.77% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 53% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-703400.60% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 47% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• unknownNCSC-2026-0287 [1.00] [M/H] Vulnerabilities fixed in Microsoft Azurencsc-nl
• unknownMultiple vulnerabilities in Microsoft Azure (August 12, 2026)cert-fr-avis
• unknownMultiple vulnerabilities in Microsoft products (August 12, 2026)cert-fr-avis
• highCVE-2026-70340: Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges …nvd
• mediumCVE-2026-65806: Missing authorization in Azure CycleCloud allows an authorized attacker to disclose informatio…nvd
• highCVE-2026-65673: Improper neutralization of special elements used in an sql command ('sql injection') in Micros…nvd
• highCVE-2026-63522: Incorrect permission assignment for critical resource in Azure SQL Database allows an authoriz…nvd
• highCVE-2026-62869: Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker…nvd
• criticalCVE-2026-50516: Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an u…nvd
• highCVE-2026-47299: Improper neutralization of special elements used in a command ('command injection') in Azure M…nvd
• criticalCVE-2026-50481: Azure Active Directory Elevation of Privilege Vulnerabilitymsrc
• criticalCVE-2026-59115: Microsoft Entra Provisioning Service Elevation of Privilege Vulnerabilitymsrc

Recent advisories for Microsoft Azure and

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• unknownNCSC-2026-0347 [1.01] [M/H] Kwetsbaarheden verholpen in Microsoft Azurencsc-nl · 2026-09-14
• high[NEU] [hoch] Microsoft Azure, Entra und Azure CLI : Mehrere Schwachstellencert-bund · 2026-09-09
• unknownMultiples vulnérabilités dans Microsoft Azure (09 septembre 2026)cert-fr-avis · 2026-09-09
• unknownNCSC-2026-0347 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Azurencsc-nl · 2026-09-08
• highCVE-2026-83948: Improper neutralization of special elements used in a command ('command injection') in Microso…nvd · 2026-09-08
• highCVE-2026-83948: Microsoft Azure CLI Remote Code Execution Vulnerabilitymsrc · 2026-09-08

More from CERT-Bund (BSI) Security Advisories

• medium[NEU] [mittel] Microsoft Edge: Schwachstelle ermöglicht Cross-Site Scripting2026-09-14
• medium[NEU] [mittel] Citrix Systems Workspace App Windows: Mehrere Schwachstellen ermöglichen nicht spezifizierten A…2026-09-14
• medium[NEU] [mittel] wpa_supplicant: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen2026-09-14
• medium[NEU] [mittel] WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Offenlegung von Informationen2026-09-14
• low[UPDATE] [niedrig] 7-Zip: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen2026-09-14