Veille CVE

Recherche « Microsoft Azure CLI »

3 CVE

Critique 0 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Azure CLI » ✕
  1. CVE-2026-69877 6.5 Moyenne

    Microsoft Azure CLI · Microsoft Azure DevOps CLI Extension

    Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.

  2. CVE-2026-83948 8.0 Élevée

    Microsoft Azure CLI · Microsoft vm repair

    Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.

  3. CVE-2026-56270 7.5 Élevée

    Flowise · Flowiseai flowise

    Flowise before 3.1.0 (versions 3.0.13 and earlier) contains a missing authentication vulnerability in the /api/v1/loginmethod endpoint that allows unauthenticated users to retrieve an organization's complete SSO configuration, including OAuth client secrets in cleartext, by providing an organizationId parameter. Remote attackers can send a GET request to harvest sensitive API credentials for Google, Microsoft/Azure, GitHub, and Auth0 integrations. This affects FlowiseAI Cloud and self-hosted instances where the endpoint is exposed.