CVE-2026-68791
HighCVSS 8.6Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.
Risk Assessment
An attacker can gain access to sensitive data stored in Azure Machine Learning, compromising confidentiality.
Recommendation
It is recommended to review and strengthen authorization mechanisms and apply patches from Microsoft.
Other vulnerabilities in Azure Machine Learning
See all- CVE-2026-32207High
Azure Machine Learning has an improper neutralization of input during web page generation, leading to a cross-site scripting (XSS) vulnerability. This allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-33833High
Improper neutralization of special elements in output used by a downstream component in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.
- CVE-2023-23382Medium
An information disclosure vulnerability in Azure Machine Learning Compute Instance. An attacker could exploit this to gain unauthorized access to data.
Original NVD description (English source)
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS