7.4
High
CVE-2026-85922 Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network
Description
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| azure_security_keyvault_certificates 1.0 | earliest → < 1.0.1 | 1.0.1 |
| azure_security_keyvault_keys 1.0 | earliest → < 1.0.1 | 1.0.1 |
| azure_security_keyvault_secrets 1.0 | earliest → < 1.0.1 | 1.0.1 |
| azure-keyvault-administration 4.7 | earliest → < 4.7.1 | 4.7.1 |
| azure-keyvault-certificates 4.11 | earliest → < 4.11.2 | 4.11.2 |
| azure-keyvault-keys 4.11 | earliest → < 4.11.2 | 4.11.2 |
| azure-keyvault-secrets 4.11 | earliest → < 4.11.2 | 4.11.2 |
| azure-keyvault-securitydomain 1.0 | earliest → < 1.0.0b3 | 1.0.0b3 |