CyberICT

CVE-2026-66803

Microsoft · Published July 30, 2026

CVSS v3.1

CRITICAL
Patch availableGet patch

Description

Azure Cosmos DB Remote Code Execution Vulnerability. Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.

Affected Products

  • Azure Cosmos DB

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C