SOURCE-LINKED INTELLIGENCE

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

The Hacker News · article · Sep 18, 2026 · UTC

Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0. "Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network,"

Read original source ↗ Open in workspace

recordType: article
region: Global

Evidence & attribution

The Hacker News · 2026-09-18T12:47:04.000Z

First collected: 2026-09-19T20:26:32.566Z. This is not the publication date.