CVE-2026-88132medium5.9
Azure Key Vault Information Disclosure Vulnerability
Impact
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
Source excerpt · microsoftAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · azure-keyvault-administration
| Version / range | Source status |
|---|---|
| 4.7.1 to before 4.8.2 | affected |
Microsoft · azure-keyvault-certificates
| Version / range | Source status |
|---|---|
| 4.11.2 to before 4.9.2 | affected |
Microsoft · azure-keyvault-keys
| Version / range | Source status |
|---|---|
| 4.11.2 to before 4.10.2 | affected |
Microsoft · azure-keyvault-secrets
| Version / range | Source status |
|---|---|
| 4.11.2 to before 4.11.2 | affected |
Original source description
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.