Skip to content

Vulnerabilities of Microsoft Azure Cosmos DB

Is your version affected?

CVE Summary Score Published
CVE-2026-87701 Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB… 9.6 Critical Sep 17, 2026
CVE-2026-66803 Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network 10.0 Critical Jul 30, 2026
CVE-2026-24304 Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network 9.9 Critical Jan 23, 2026

Other Microsoft products