HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-33833 — Improper neutralization of special elements in output used by a downstream compo...

·Source: NIST NVD

Updated:

Executive Summary

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.

Analysis

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network. CVSS Score: 8.2. Published: 2026-05-12T18:17:05.160.

Indicators of Compromise (1)

CVE (1)
CVE-2026-33833
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on May 12, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-45230 — DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /a...

DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated attackers to delete arbitrary files by supplying ../ sequences that bypass directory boundary validation. Attackers can exploit the optional and disabled-by-default authentication control to traverse outside the intended application

CVE-2026-45230
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-42822 — Improper authentication in Azure Local Disconnected Operations allows an unautho...

Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-42822
NIST NVD
MEDIUMVulnerability

Grafana refuses to pay ransom after codebase theft

On Saturday night, the company released a statement confirming the incident and outlining their decision not to pay a ransom issued by the hackers behind the attack.

The Record