CVE-2026-23659

Microsoft · Published March 19, 2026

8.6

CVSS v3.1

HIGH

Patch availableGet patch

Description

Azure Data Factory Information Disclosure Vulnerability. Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network.

Affected Products

Azure Data Factory

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C