Known Vulnerabilities for Azure Arc by Microsoft
Listed below are 2 of the newest known vulnerabilities associated with "Azure Arc" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-39974 json | n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentat... | Not Provided | 2026-04-09 | 2026-04-13 |
| CVE-2026-39361 json | OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validate_enrichment_url function in src/hand... | Not Provided | 2026-04-07 | 2026-04-09 |
| CVE-2026-34750 json | Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/storage-azure, @... | Not Provided | 2026-04-01 | 2026-04-02 |
| CVE-2026-34397 json | Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 an... | Not Provided | 2026-04-01 | 2026-04-04 |
| CVE-2026-33980 json | Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and... | Not Provided | 2026-03-27 | 2026-03-27 |
| CVE-2026-33726 json | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8,... | Not Provided | 2026-03-27 | 2026-03-27 |
| CVE-2026-33107 json | Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network. | Not Provided | 2026-04-03 | 2026-04-04 |
| CVE-2026-33105 json | Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a net... | Not Provided | 2026-04-03 | 2026-04-04 |
| CVE-2026-32268 json | The Azure Blob Storage for Craft CMS plugin provides an Azure Blob Storage integration for Craft CMS. In versions on the 2.x ... | Not Provided | 2026-03-18 | 2026-03-18 |
| CVE-2026-32213 json | Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network. | Not Provided | 2026-04-03 | 2026-04-04 |