Security October 2026 CVE-2026-88132
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
Severity Important
CVSS base score 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Impact Information Disclosure
EPSS, next 30 days 0.3% Higher than 24.7% of scored CVEs · FIRST model run 25 Oct 2026 · about EPSS
Public exploit code No Nuclei template lists it
Exploitability Exploitation Less Likely
Publicly disclosed No
Customer action Required: apply the update
Component Azure Key Vault
Weakness CWE-346: Origin Validation Error
Issued by Microsoft
Last revised 13 Oct 2026 CVSS 3.1 base metrics Red raises the risk · green lowers it
Attack vector NetworkAV:N
Attack complexity HighAC:H
Privileges required NonePR:N
User interaction NoneUI:N
Scope UnchangedS:U
Confidentiality HighC:H
Integrity NoneI:N
Availability NoneA:N
0 KBs No KB listed MSRC lists no downloadable update, which usually means a service-side fix or a release-notes update. Check the MSRC advisory.
4 affected products
azure-keyvault-administration azure-keyvault-certificates azure-keyvault-keys azure-keyvault-secrets Source. This summary comes from MSRC's public CVRF document for October 2026. If the MSRC page is blocked in your browser, the NVD and CVE.org records carry the same identifier. None of this says whether your devices are affected.
Explore global source statements, affected packages and advisory history for CVE-2026-88132 . The catalog has a separate collection scope from Microsoft release records.
Overview Affected History Connections
cve-program · CVE-2026-88132 Published azure-keyvault-administration Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "azure-keyvault-administration",
"versions": [
{
"version": "4.7.1",
"lessThan": "4.8.2",
"versionType": "custom",
"status": "affected"
}
]
} azure-keyvault-certificates Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "azure-keyvault-certificates",
"versions": [
{
"version": "4.11.2",
"lessThan": "4.9.2",
"versionType": "custom",
"status": "affected"
}
]
} azure-keyvault-keys Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "azure-keyvault-keys",
"versions": [
{
"version": "4.11.2",
"lessThan": "4.10.2",
"versionType": "custom",
"status": "affected"
}
]
} azure-keyvault-secrets Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "azure-keyvault-secrets",
"versions": [
{
"version": "4.11.2",
"lessThan": "4.11.2",
"versionType": "custom",
"status": "affected"
}
]
}