{"id":"CVE-2026-85922","revision":"788d2b3e52404f26a0f7e2fb045ae80c","records":[{"revision":"788d2b3e52404f26a0f7e2fb045ae80c","observedAt":"2026-10-23T23:48:20.643+00:00","statement":{"source":"cve-program","id":"CVE-2026-85922","aliases":[],"title":"Azure Key Vault Security Feature Bypass Vulnerability","description":"Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.","state":0,"publishedAt":"2026-10-13T19:01:09.179+00:00","modifiedAt":"2026-10-23T22:29:31.656+00:00","affected":[{"ecosystem":"Vendor product","name":"azure_security_keyvault_certificates","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"azure_security_keyvault_certificates\",\n                    \"versions\": [\n                        {\n                            \"version\": \"1.0.1\",\n                            \"lessThan\": \"1.0.1\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"azure_security_keyvault_keys","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"azure_security_keyvault_keys\",\n                    \"versions\": [\n                        {\n                            \"version\": \"1.0.1\",\n                            \"lessThan\": \"1.0.1\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"azure_security_keyvault_secrets","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"azure_security_keyvault_secrets\",\n                    \"versions\": [\n                        {\n                            \"version\": \"1.0.1\",\n                            \"lessThan\": \"1.0.1\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"azure-keyvault-administration","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"azure-keyvault-administration\",\n                    \"versions\": [\n                        {\n                            \"version\": \"4.7.1\",\n                            \"lessThan\": \"4.7.1\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"azure-keyvault-certificates","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"azure-keyvault-certificates\",\n                    \"versions\": [\n                        {\n                            \"version\": \"4.11.2\",\n                            \"lessThan\": \"4.11.2\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"azure-keyvault-keys","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"azure-keyvault-keys\",\n                    \"versions\": [\n                        {\n                            \"version\": \"4.11.2\",\n                            \"lessThan\": \"4.11.2\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"azure-keyvault-secrets","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"azure-keyvault-secrets\",\n                    \"versions\": [\n                        {\n                            \"version\": \"4.11.2\",\n                            \"lessThan\": \"4.11.2\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"azure-keyvault-securitydomain","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"azure-keyvault-securitydomain\",\n                    \"versions\": [\n                        {\n                            \"version\": \"1.0.0b3\",\n                            \"lessThan\": \"1.0.0b3\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","score":7.4,"severity":"HIGH"}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85922"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-85922","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-85922","identifiers":["CVE-2026-85922"]},"retained":false,"historicalAffected":[]}],"coverage":[]}