CVE-2026-62825
CriticalCVSS 10.0Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An unauthorized attacker can gain elevated privileges in Azure Key Vault, potentially leading to disclosure or modification of stored keys and secrets.
Recommendation
Apply the security update provided by Microsoft for Azure Key Vault and review access configurations.
Other vulnerabilities in Azure Key Vault
See all- CVE-2026-88132Medium
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85925High
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
- CVE-2026-85922High
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
Original NVD description (English source)
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS