CVE-2026-21226

Microsoft · Published January 13, 2026

7.5

CVSS v3.1

HIGH

Patch availableGet patch

Description

Azure Core shared client library for Python Remote Code Execution Vulnerability. Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execute code over a network.

Affected Products

Azure Core shared client library for Python

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C