Microsoft Azure Cloud Shell vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Azure Cloud Shell: 2 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:azure_cloud_shell

CVE-2026-35428 Critical · 9.6 CWE-77 May 7, 2026

Azure Cloud Shell Spoofing Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-32169 Critical · 9.8 CWE-918 Mar 19, 2026

Azure Cloud Shell Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.