CVE-2026-66803
CriticalCVSS 10.0Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can gain unauthorized access to the database and execute arbitrary code, potentially leading to data confidentiality and integrity breaches.
Recommendation
Apply security updates provided by Microsoft for Azure Cosmos DB.
Other vulnerabilities in Azure Cosmos DB
See all- CVE-2026-87701Critical
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69857High
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.
Original NVD description (English source)
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS