Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-119990
By Roy Kalfon |
10 November 2026
CVE-2026-119990 – Azure OpenAI missing auth for critical function enables remote privilege elevation
Missing authentication for a critical function in Microsoft Azure OpenAI allows an unauthorized remote attacker to elevate privileges over the network. Affected versions: 1.0.0 to < hyena-infra-build-official/20260923.14. Impact includes high confidentiality/integrity/availability compromise. Remediation is service-side per Microsoft; no customer action required.