9.9 CriticalCWE-284
CVE-2026-42823
Microsoft Azure Logic Apps vulnerability
MicrosoftAzure Logic Apps
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 16 Oct
0.8%probability of exploitation in the next 30 days
Higher than 55% of scored CVEs
SeverityCVSS
9.9Critical
Description NVD
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Coverage 1 article · 1 outlet
- Microsoft Patch May 2026 fixes 137 bugs, zero day freeDark Reading · first in our coverage · mentions it in passing