[NEW] [high] Microsoft Azure and Entra ID: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Microsoft Azure and Microsoft Entra to escalate privileges, disclose information, present false information, and execute arbitrary code.
CSIRTS triage
- What
- Multiple vulnerabilities in Microsoft Azure and Entra ID enable privilege escalation, information disclosure, false information presentation, and code execution.
- Who is affected
- Users and deployments of Azure and Entra ID services are affected.
- Urgency
- High priority; multiple critical vulnerability classes affecting core identity and cloud infrastructure.
- Action
- Apply all available Microsoft security updates for Azure and Entra ID services immediately.
AI-assisted analysis generated from the source advisory — verify against the original.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2779
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-505160.77% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 53% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-504810.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 38% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-628690.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 34% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-561610.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 31% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-656680.42% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-628300.42% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-472990.94% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 58% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-491630.62% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 47% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-591150.64% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 47% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-703400.58% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 45% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-50516 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-50481 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-62869 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-56161 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-65668 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-62830 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-47299 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-49163 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59115 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-70340 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-65673 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-56162 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-63522 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-62873 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-68823 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-65806 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownNCSC-2026-0287 [1.00] [M/H] Vulnerabilities fixed in Microsoft Azurencsc-nl
- unknownMultiple vulnerabilities in Microsoft products (August 12, 2026)cert-fr-avis
- unknownMultiple vulnerabilities in Microsoft Azure (August 12, 2026)cert-fr-avis
- highCVE-2026-70340: Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges …nvd
- mediumCVE-2026-65806: Missing authorization in Azure CycleCloud allows an authorized attacker to disclose informatio…nvd
- highCVE-2026-65673: Improper neutralization of special elements used in an sql command ('sql injection') in Micros…nvd
- highCVE-2026-63522: Incorrect permission assignment for critical resource in Azure SQL Database allows an authoriz…nvd
- highCVE-2026-62869: Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker…nvd
- criticalCVE-2026-50516: Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an u…nvd
- highCVE-2026-47299: Improper neutralization of special elements used in a command ('command injection') in Azure M…nvd
- highCVE-2026-47299: Azure Monitor Agent Elevation of Privilege Vulnerabilitymsrc
- mediumCVE-2026-65806: Azure CycleCloud Information Disclosure Vulnerabilitymsrc
More from CERT-Bund (BSI) Security Advisories
- high[NEW] [high] GStreamer: Multiple Vulnerabilities2026-08-17
- high[NEW] [high] Golang Go: Multiple vulnerabilities2026-08-17
- medium[NEW] [medium] Apache Struts: Multiple vulnerabilities2026-08-17
- high[NEW] [high] PostgreSQL: Multiple vulnerabilities2026-08-17
- high[UPDATE] [high] Oracle PeopleSoft: Multiple Vulnerabilities2026-08-17