CVE-2026-85922

CVE-2026-85922 · Azure Key Vault Security Feature Bypass Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.

CVSS 7.4 · High · EPSS 0.6%

Affected products and versions

azure_security_keyvault_certificates
Versions
- ≥ 1.0.1, < 1.0.1: Affected (custom)
No fix published
azure_security_keyvault_keys
Versions
- ≥ 1.0.1, < 1.0.1: Affected (custom)
No fix published
azure_security_keyvault_secrets
Versions
- ≥ 1.0.1, < 1.0.1: Affected (custom)
No fix published
azure-keyvault-administration
Versions
- ≥ 4.7.1, < 4.7.1: Affected (custom)
No fix published
azure-keyvault-certificates
Versions
- ≥ 4.11.2, < 4.11.2: Affected (custom)
No fix published
azure-keyvault-keys
Versions
- ≥ 4.11.2, < 4.11.2: Affected (custom)
No fix published
azure-keyvault-secrets
Versions
- ≥ 4.11.2, < 4.11.2: Affected (custom)
No fix published
azure-keyvault-securitydomain
Versions
- ≥ 1.0.0b3, < 1.0.0b3: Affected (custom)
No fix published