azure_data_factory vulnerabilities
CVEs whose affected-version data names the azure_data_factory package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-62834Critical· 9.3Azure Data Factory Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network.
▾ MidnightMicrosoft · Azure Data FactoryEPSS 0.29%via CVEORG
CVE-2026-66800High· 8.6Azure Data Factory Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a network.
▾ TwilightMicrosoft · Azure Data FactoryEPSS 0.54%via CVEORG