CVE-2026-109457

Vendor

Microsoft

Product

Azure Machine Learning

CVSS v3.1

8.0 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness

CWE-78

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 42
   CVE NVD 1h ago

   Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code…

   Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code over a network.

   CVSS 8.0 CVE-2026-109457 Microsoft
2. 40
   Advisory MSRC 4h ago

   Azure CLI Remote Code Execution Vulnerability

   Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code over a network.

   CVE-2026-109457 Microsoft