CVE-2026-85922high7.4
Azure Key Vault Security Feature Bypass Vulnerability
Impact
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
Source excerpt · microsoftAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · azure_security_keyvault_certificates
| Version / range | Source status |
|---|---|
| 1.0.1 to before 1.0.1 | affected |
Microsoft · azure_security_keyvault_keys
| Version / range | Source status |
|---|---|
| 1.0.1 to before 1.0.1 | affected |
Microsoft · azure_security_keyvault_secrets
| Version / range | Source status |
|---|---|
| 1.0.1 to before 1.0.1 | affected |
Microsoft · azure-keyvault-administration
| Version / range | Source status |
|---|---|
| 4.7.1 to before 4.7.1 | affected |
Microsoft · azure-keyvault-certificates
| Version / range | Source status |
|---|---|
| 4.11.2 to before 4.11.2 | affected |
Microsoft · azure-keyvault-keys
| Version / range | Source status |
|---|---|
| 4.11.2 to before 4.11.2 | affected |
Microsoft · azure-keyvault-secrets
| Version / range | Source status |
|---|---|
| 4.11.2 to before 4.11.2 | affected |
Microsoft · azure-keyvault-securitydomain
| Version / range | Source status |
|---|---|
| 1.0.0b3 to before 1.0.0b3 | affected |
Original source description
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.