CVE-2026-56161
CriticalCVSS 9.6Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Risk Assessment
Risk of leaking sensitive data processed by logic apps.
Recommendation
Review and tighten access policies for Azure Logic Apps and regularly audit permissions.
Other vulnerabilities in Azure Logic Apps
See all- CVE-2026-83944Critical
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-70200Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69400Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-42823Critical
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS