[vulnfeed] 5 critical CVEs — 2026-07-03 04:00 UTC
vulnfeed
Critical alert — 2026-07-03 04:15 UTC
5 new critical CVEs
in the last 5 hours — 5 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-45499CRITICAL
Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a
Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.
CVSS 9.9
CVE-2026-57100CRITICAL
Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized a
Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
CVSS 9.9
CVE-2026-13768CRITICAL
Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke a
Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke an IoTHub Registry Manager function which returns connection information for all Gardyn Hom
CVSS 9.5
CVE-2026-41106CRITICAL
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
CVSS 9.3
CVE-2026-13368CRITICAL
WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authenticat
WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication for the Mobile User VPN with IKEv2. A remote unauthenticated attacker could exploit th
CVSS 9.2
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: