WID-SEC-W-2026-3460

Vulnerability from csaf_certbund - Published: 2026-09-17 22:00 - Updated: 2026-09-17 22:00
Summary
Microsoft Azure: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Azure ist eine Cloud Computing-Plattform von Microsoft. Azure Cosmos DB ist ein NoSQL-Datenbankdienst von Microsoft. Microsoft Entra ID (früher Azure Active Directory) ist ein cloudbasierter Identitäts- und Zugriffsverwaltungsdienst von Microsoft. Die Azure-Befehlszeilenschnittstelle (Command-Line Interface, CLI) setzt sich aus Befehlen zum Erstellen und Verwalten von Azure-Ressourcen zusammen. Die Azure CLI ist in allen Azure-Diensten verfügbar.
Angriff: Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure, Microsoft Azure Cosmos DB, Microsoft Entra und Microsoft Azure CLI ausnutzen, um seine Privilegien zu erhöhen, um falsche Informationen darzustellen, um Informationen offenzulegen und um beliebigen Programmcode auszuführen.
Betroffene Betriebssysteme: - Linux - Sonstiges - UNIX - Windows
Affected products
Product Identifier Version Remediation
Microsoft Entra ID
Microsoft / Entra
cpe:/a:microsoft:entra:id ID
Microsoft Azure Logic Apps
Microsoft / Azure
cpe:/a:microsoft:azure:logic_apps Logic Apps
Microsoft Azure Cosmos DB
Microsoft
cpe:/a:microsoft:azure_cosmos_db:- —
Microsoft Azure Portal
Microsoft / Azure
cpe:/a:microsoft:azure:portal Portal
Microsoft Azure HorizonDB
Microsoft / Azure
cpe:/a:microsoft:azure:horizondb HorizonDB
Microsoft Azure AI Language Authoring
Microsoft / Azure
cpe:/a:microsoft:azure:ai_language_authoring AI Language Authoring
Microsoft Azure Container Registry
Microsoft / Azure
cpe:/a:microsoft:azure:container_registry Container Registry
Microsoft Azure Spring Cloud Azure
Microsoft / Azure
cpe:/a:microsoft:azure:spring_cloud_azure Spring Cloud Azure
Microsoft Azure CycleCloud 8.9.2
Microsoft / Azure
cpe:/a:microsoft:azure:cyclecloud_8.9.2 CycleCloud 8.9.2
Microsoft Azure ARC
Microsoft / Azure
cpe:/a:microsoft:azure:arc ARC
Microsoft Azure Billing
Microsoft / Azure
cpe:/a:microsoft:azure:billing Billing
Microsoft Azure HDInsight
Microsoft / Azure
cpe:/a:microsoft:azure:hdinsight HDInsight
Microsoft Azure Arc SQL Server Extension
Microsoft / Azure
cpe:/a:microsoft:azure:arc_sql_server_extension Arc SQL Server Extension
Microsoft Azure AI Foundry
Microsoft / Azure
cpe:/a:microsoft:azure:ai_foundry AI Foundry
Microsoft Azure Active Directory B2C
Microsoft / Azure
cpe:/a:microsoft:azure:active_directory_b2c Active Directory B2C
Microsoft Azure Machine Learning
Microsoft / Azure
cpe:/a:microsoft:azure:machine_learning Machine Learning
Microsoft Azure CLI
Microsoft
cpe:/a:microsoft:azure_cli:- —
Affected products
Known affected 17 products, the same list as for CVE-2026-62874
Affected products
Known affected 17 products, the same list as for CVE-2026-62874
Affected products
Known affected 17 products, the same list as for CVE-2026-62874
Affected products
Known affected 17 products, the same list as for CVE-2026-62874
Affected products
Known affected 17 products, the same list as for CVE-2026-62874
Affected products
Known affected 17 products, the same list as for CVE-2026-62874
Affected products
Known affected 17 products, the same list as for CVE-2026-62874
Affected products
Known affected 17 products, the same list as for CVE-2026-62874
Affected products
Known affected 17 products, the same list as for CVE-2026-62874
Affected products
Known affected 17 products, the same list as for CVE-2026-62874
Affected products
Known affected 17 products, the same list as for CVE-2026-62874
References
URL Category
https://wid.cert-bund.de/.well-known/csaf/white/2… self
https://wid.cert-bund.de/portal/wid/securityadvis… self
https://msrc.microsoft.com/update-guide/ external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external
https://msrc.microsoft.com/update-guide/vulnerabi… external

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Azure ist eine Cloud Computing-Plattform von Microsoft.\r\nAzure Cosmos DB ist ein NoSQL-Datenbankdienst von Microsoft.\r\nMicrosoft Entra ID (fr\u00fcher Azure Active Directory) ist ein cloudbasierter Identit\u00e4ts- und Zugriffsverwaltungsdienst von Microsoft.\r\nDie Azure-Befehlszeilenschnittstelle (Command-Line Interface, CLI) setzt sich aus Befehlen zum Erstellen und Verwalten von Azure-Ressourcen zusammen. Die Azure CLI ist in allen Azure-Diensten verf\u00fcgbar.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure, Microsoft Azure Cosmos DB, Microsoft Entra und Microsoft Azure CLI ausnutzen, um seine Privilegien zu erh\u00f6hen, um falsche Informationen darzustellen, um Informationen offenzulegen und um beliebigen Programmcode auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-3460 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3460.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-3460 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3460"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates",
        "url": "https://msrc.microsoft.com/update-guide/"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-69865",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69865"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-87701",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87701"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-69857",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69857"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-81349",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81349"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-69399",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69399"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-70009",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70009"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-68791",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68791"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-83711",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83711"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-84003",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84003"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-62916",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62916"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-83941",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83941"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-85917",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85917"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-85889",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85889"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-83946",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83946"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-83948",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83948"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-83944",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83944"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-70200",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70200"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-70352",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70352"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-85878",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85878"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-77909",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77909"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-69854",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69854"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-62895",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62895"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-62906",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62906"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-62874",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62874"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft Azure: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-09-17T22:00:00.000+00:00",
      "generator": {
        "date": "2026-09-18T12:36:35.566+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-3460",
      "initial_release_date": "2026-09-17T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-09-17T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Container Registry",
                "product": {
                  "name": "Microsoft Azure Container Registry",
                  "product_id": "T059816",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:container_registry"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "HDInsight",
                "product": {
                  "name": "Microsoft Azure HDInsight",
                  "product_id": "T059817",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:hdinsight"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ARC",
                "product": {
                  "name": "Microsoft Azure ARC",
                  "product_id": "T059818",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:arc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Machine Learning",
                "product": {
                  "name": "Microsoft Azure Machine Learning",
                  "product_id": "T059819",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:machine_learning"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Active Directory B2C",
                "product": {
                  "name": "Microsoft Azure Active Directory B2C",
                  "product_id": "T059820",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:active_directory_b2c"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "AI Foundry",
                "product": {
                  "name": "Microsoft Azure AI Foundry",
                  "product_id": "T059821",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:ai_foundry"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Portal",
                "product": {
                  "name": "Microsoft Azure Portal",
                  "product_id": "T059822",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:portal"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Logic Apps",
                "product": {
                  "name": "Microsoft Azure Logic Apps",
                  "product_id": "T059823",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:logic_apps"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "AI Language Authoring",
                "product": {
                  "name": "Microsoft Azure AI Language Authoring",
                  "product_id": "T059824",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:ai_language_authoring"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "HorizonDB",
                "product": {
                  "name": "Microsoft Azure HorizonDB",
                  "product_id": "T059825",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:horizondb"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "CycleCloud 8.9.2",
                "product": {
                  "name": "Microsoft Azure CycleCloud 8.9.2",
                  "product_id": "T059826",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:cyclecloud_8.9.2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Spring Cloud Azure",
                "product": {
                  "name": "Microsoft Azure Spring Cloud Azure",
                  "product_id": "T059827",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:spring_cloud_azure"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Arc SQL Server Extension",
                "product": {
                  "name": "Microsoft Azure Arc SQL Server Extension",
                  "product_id": "T059828",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:arc_sql_server_extension"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Billing",
                "product": {
                  "name": "Microsoft Azure Billing",
                  "product_id": "T059829",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:billing"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Azure"
          },
          {
            "category": "product_name",
            "name": "Microsoft Azure CLI",
            "product": {
              "name": "Microsoft Azure CLI",
              "product_id": "T038090",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:azure_cli:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Microsoft Azure Cosmos DB",
            "product": {
              "name": "Microsoft Azure Cosmos DB",
              "product_id": "T057469",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:azure_cosmos_db:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ID",
                "product": {
                  "name": "Microsoft Entra ID",
                  "product_id": "T058437",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:entra:id"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Entra"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-62874",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-62874"
    },
    {
      "cve": "CVE-2026-68791",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-68791"
    },
    {
      "cve": "CVE-2026-69399",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-69399"
    },
    {
      "cve": "CVE-2026-69865",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-69865"
    },
    {
      "cve": "CVE-2026-70009",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-70009"
    },
    {
      "cve": "CVE-2026-70200",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-70200"
    },
    {
      "cve": "CVE-2026-83944",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-83944"
    },
    {
      "cve": "CVE-2026-83946",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-83946"
    },
    {
      "cve": "CVE-2026-85878",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-85878"
    },
    {
      "cve": "CVE-2026-85889",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-85889"
    },
    {
      "cve": "CVE-2026-85917",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-85917"
    },
    {
      "cve": "CVE-2026-87701",
      "product_status": {
        "known_affected": [
          "T058437",
          "T059823",
          "T057469",
          "T059822",
          "T059825",
          "T059824",
          "T059816",
          "T059827",
          "T059826",
          "T059818",
          "T059829",
          "T059817",
          "T059828",
          "T059821",
          "T059820",
          "T059819",
          "T038090"
        ]
      },
      "release_date": "2026-09-17T22:00:00.000+00:00",
      "title": "CVE-2026-87701"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…