CVE-2026-85922: azure_security_keyvault_certificates 1.0.1 to before 1.0.1; +7 more affected products

Affected technology

azure_security_keyvault_certificates · 1.0.1 to before 1.0.1
Microsoft

azure_security_keyvault_keys · 1.0.1 to before 1.0.1
Microsoft

azure_security_keyvault_secrets · 1.0.1 to before 1.0.1
Microsoft

azure-keyvault-administration · 4.7.1 to before 4.7.1
Microsoft

azure-keyvault-certificates · 4.11.2 to before 4.11.2
Microsoft

azure-keyvault-keys · 4.11.2 to before 4.11.2
Microsoft

azure-keyvault-secrets · 4.11.2 to before 4.11.2
Microsoft

azure-keyvault-securitydomain · 1.0.0b3 to before 1.0.0b3
Microsoft

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthorized attacker can bypass a security feature over a network. Vendor/CNA’s CVSS 3.1 assessment (base score 7.4/10) rates confidentiality and integrity impact as high; availability impact as none.