10.0 CriticalCWE-290
CVE-2026-48567
Microsoft Azure HorizonDB vulnerability
MicrosoftAzure HorizonDB
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.9%probability of exploitation in the next 30 days
Higher than 60% of scored CVEs
SeverityCVSS
10.0Critical
Description NVD
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Coverage 1 article · 1 outlet
- MS Patch Tuesday 2026 Fixes 206 Flaws Including Three Zero DaysSOCRadar · first in our coverage · mentions it in passing