CVE-2026-85922
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
Risk Assessment
The flaw enables bypassing security controls without valid credentials, potentially resulting in unauthorized access to protected cloud secrets and keys.
Recommendation
Immediately strengthen authentication mechanisms in Azure Key Vault, enforce multi-factor authentication, and apply Microsoft security updates.
Other vulnerabilities in Azure Key Vault
See all- CVE-2026-62825Critical
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-88132Medium
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85925High
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS