CVE-2026-85922
HighCVSS 7.4Summary
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
Risk Assessment
The flaw enables bypassing security controls without valid credentials, potentially resulting in unauthorized access to protected cloud secrets and keys.
Recommendation
Immediately strengthen authentication mechanisms in Azure Key Vault, enforce multi-factor authentication, and apply Microsoft security updates.
Other vulnerabilities in Azure Key Vault
See all- CVE-2026-85925High
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
- CVE-2026-62825Critical
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS