CVE-2026-119990

Vendor

Microsoft

Product

Azure Open AI

CVSS v3.1

9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-306

Exposure class

Cloud platform, AI infrastructure

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 57
   CVE NVD 3h ago

   Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.

   Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.

   CVSS 9.8 CVE-2026-119990 Microsoft
2. 34
   Qualys TRU Qualys 2h ago

   Microsoft Patch Tuesday, November 2026 Security Update Review

   As the year approaches its final stretch, Microsoft’s November 2026 Patch Tuesday highlights the continued importance of proactive vulnerability management. This month’s security updates address vulnerabilities across the…

   Fix available CVE-2026-124194CVE-2026-120003CVE-2026-118148+57 more Microsoft