CVE-2026-69857
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.
Risk Assessment
Risk of impersonation in the cloud environment, potentially leading to unauthorized data access or breach of trust.
Recommendation
Apply security updates provided by Microsoft and review authorization key configurations in Azure Cosmos DB.
Other vulnerabilities in Azure Cosmos DB
See all- CVE-2026-87701Critical
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
- CVE-2026-66803Critical
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS