CVE-2026-105014

Vendor

Microsoft

Product

azure

CVSS

9.1

EPSS

0.007 (p52)

Exposure class

Cloud platform, Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 35
   CVE NVD 9d ago

   Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute…

   Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.

   CVSS 9.1 CVE-2026-105014 Microsoft
2. 25
   Advisory MSRC 9d ago

   Azure Pipelines Remote Code Execution Vulnerability

   Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.

   CVE-2026-105014 Microsoft