CVE-2026-85925
8.2HighPublished 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on confidentiality, integrity
- Weakness
- CWE-923
Impact
An authorized network attacker can elevate privileges across Azure Key Vault environments. They need valid credentials with existing access to the network channel or service.
Root cause
Improper restriction of communication channels to intended endpoints allows requests to reach unauthorized endpoints.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Fix & remediation
Review the Microsoft Security Update Guide advisory for deployment status and apply any required cloud policy or infrastructure updates as this is an Azure-managed service.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.