NewsDark Reading24.07.2026

Default Azure Automation Setting Enables Cross-Tenant Identity Takeover

Teaser from the source

Microsoft addresses a public-by-default configuration and chain of code flaws in Azure Automation that could have let attackers seize another tenant's identity and access others' data, credentials, and cloud workloads.

This is the RSS-feed teaser. Read the full article at the original source.

Read at Dark Reading

Other advisories

Not ratedosv:CVE-2026-63398Coop has SAML cross-tenant authentication bypass
Not ratedosv:CVE-2026-119708abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name
Not ratedosv:CVE-2026-61708SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)
Not ratedosv:CVE-2026-118760Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads
Not ratedosv:CVE-2026-118759Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant
MediumCVE-2026-116575Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
MediumCVE-2026-116575Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
Not ratedosv:CVE-2026-59185identrail: Cross-tenant GitHub installation binding without ownership verification

Other news entries

Source: https://www.darkreading.com/cloud-security/default-azure-automation-setting-cross-tenant-identity-takeover

More on Cross-Tenant

Other advisories

Other news entries