high7.4
CVE-2026-85922
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
Impact
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Azure-Keyvault-Administration | from 4.7.1 before 4.7.1 |
| Microsoft | Azure-Keyvault-Securitydomain | from 1.0.0b3 before 1.0.0b3 |
| Microsoft | Azure-Keyvault-Certificates | from 4.11.2 before 4.11.2 |
| Microsoft | Azure Security Keyvault Certificates | from 1.0.1 before 1.0.1 |
| Microsoft | Azure-Keyvault-Secrets | from 4.11.2 before 4.11.2 |
| Microsoft | Azure Security Keyvault Secrets | from 1.0.1 before 1.0.1 |
| Microsoft | Azure-Keyvault-Keys | from 4.11.2 before 4.11.2 |
| Microsoft | Azure Security Keyvault Keys | from 1.0.1 before 1.0.1 |
| Microsoft | Azure-Keyvault-Administration | before 1.0.1 before 4.7.1 |
| Microsoft | Azure-Keyvault-Certificates | before 1.0.1 before 4.11.2 |
| Microsoft | Azure-Keyvault-Keys | before 4.11.2 |
| Microsoft | Azure-Keyvault-Secrets | before 1.0.1 before 4.11.2 |
| Microsoft | Azure-Keyvault-Securitydomain | Version 1.0.0 |