CVE Catalog

CVE-2026-66803

CriticalCVSS 10.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.49%

40th percentile - higher than 40% of all known CVEs

Summary

Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.

Risk Assessment

An attacker can gain unauthorized access to the database and execute arbitrary code, potentially leading to data confidentiality and integrity breaches.

Recommendation

Apply security updates provided by Microsoft for Azure Cosmos DB.

Original NVD description (English source)

Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS