Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-85889, CVE-2026-85878, CVE-2026-62874
By Roy Kalfon |
18 September 2026
Multiple CVE’s – Azure AI Foundry, Azure Billing, and Azure Database for PostgreSQL flaws enable network privilege escalation
Azure AI Foundry has missing auth for a critical function enabling unauth network privilege escalation. Azure Billing has insufficient authenticity verification enabling unauth privilege escalation over network. Azure Database for PostgreSQL/Azure HorizonDB has improper authorization enabling authorized network privilege escalation. Apply MSRC fixes/mitigations for each service.
CVE IDs: CVE-2026-85878, CVE-2026-62874, CVE-2026-85889