Authentication Bypass Vulnerability in Azure HorizonDB - Microsoft
CVE-2026-48567

10CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure Horizondb
Vendor
CVE Published:
4 June 2026

What is CVE-2026-48567?

An authentication bypass vulnerability exists in Azure HorizonDB, enabling unauthorized attackers to spoof credentials and elevate privileges over a network. This issue poses significant security risks, potentially allowing attackers to gain access to restricted areas of the application and manipulate data. Administrators are urged to apply the necessary patches to safeguard their systems and maintain the integrity of their data.

Affected Version(s)

Azure HorizonDB -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.