Multiple vulnerabilities in Microsoft Azure

Description

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Azure Monitor Agent can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Azure Logic Apps can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Microsoft High Performance Compute (HPC) Pack can be exploited remotely to gain privileges.
4. Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps can be exploited remotely to bypass security restrictions.

Original advisories

• CVE-2026-32184

• CVE-2026-32168
• CVE-2026-32192
• CVE-2026-32171
• CVE-2026-26149

Exploitation

Related products

• Microsoft-Azure
• Microsoft-HPC-Pack
• Azure-Monitor
• Azure-Monitor-Agent

CVE list

• CVE-2026-26149
  critical
• CVE-2026-32168
  critical
• CVE-2026-32171
  critical
• CVE-2026-32184
  critical
• CVE-2026-32192
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com