9.8
Critical
CVE-2026-21531 Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network
Description
Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure AI Language Authoring 1.0 | earliest → < 1.0.0b4 | 1.0.0b4 |