CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-69435 — Missing authorization in Azure SRE Agent allows an authorized attacker to elevat...

·Source: NIST NVD

Updated:

Executive Summary

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

Analysis

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. CVSS Score: 9.6. Published: 2026-10-08T23:17:02.783.

Indicators of Compromise (1)

CVE (1)
CVE-2026-69435
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Researchers Infiltrate Microsoft Tech Support Scam Operation

A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.

Dark Reading
CRITICALVulnerability

NVD CRITICAL: CVE-2026-112779 — Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation...

Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/{lang} endpoint, and 1.0.16 before 1.0.42 fails to check target and destination page rules in the sync and batch copy endpoints. Unauthenticated attackers can send small requests that each store about 560 KB to exhaust

CVE-2026-112779
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-112776 — Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerabilit...

Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens to mutate other sites' content because requireAllowedSite() is not enforced. Attackers holding a site-A token can create entries in site B via supplied siteId and delete entries, categories, tags, and assets shared across sites.

CVE-2026-112776
NIST NVD