CVE-2026-77900

CriticalCVSS 9.8

Published: 08/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Summary

Missing authentication for a critical function in Azure App Service allows an unauthorized attacker to execute code over a network.

Risk Assessment

An attacker could exploit unauthenticated access to a critical function to remotely execute code, potentially leading to service takeover and data breach.

Recommendation

Immediately apply patches for Azure App Service and implement additional authentication and monitoring controls.

Other vulnerabilities in Azure App Service

CVE-2026-58630Critical
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.

Original NVD description (English source)

Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS