CVE-2026-42822Critical· 10.0▾ MidnightImproper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 55 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.9%
Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.
azure_local < 2604.2.25645azure_resource_managerUpgrade past the affected range:
azure_local 2604.2.25645Connected by shared product, vendor, weakness, or advisory.
CVE-2025-49706Medium· 6.5Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2024-49039High· 8.8Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2024-35248High· 7.3Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVE-2023-49105Critical· 9.8An issue was discovered in ownCloud owncloud/core before 10.13.1
CVE-2019-1946Medium· 6.5A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and get limited access to the web-based management int…
CVE-2022-40684Critical· 9.8An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 …