← Back to browse · API

CVE-2026-21515

Severity
CRITICAL
CVSS
9.9
EPSS
0.00701
Risk score
39.85
CISA KEV
No
PoC
No
Published
2026-04-24
Modified
2026-08-14
First seen
2026-08-07
Aliases
EUVD-2026-25416, GHSA-WF2V-9GJV-6GV6
Products
Microsoft:Azure IOT Central -
Sources
euvd EUVD-2026-25416

Description

Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network.

References