{"id":"EM-20261110-RR7I","url":"https://cyber.eventmonitor.net/incident/EM-20261110-RR7I/critical-azure-openai-vulnerability-cve-2026-119990/","type":"cve","title":"Critical Azure OpenAI Vulnerability (CVE-2026-119990)","subtitle":"CVE-2026-119990","subject":"CVE-2026-119990","status":"Developing","severity":"critical","affected":[],"headline":null,"born":"2026-11-10T19:59:23.000Z","firstSignal":"2026-11-10T19:20:24.280Z","lastSignal":"2026-11-10T19:59:23.000Z","updated":"2026-11-10T20:02:43.221Z","revision":1,"life":[{"status":"Born","at":"2026-11-10T19:59:23.000Z","why":"second independent source: C15 NCSC-NL"},{"status":"Developing","at":"2026-11-10T19:59:23.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-10T19:20:24.280Z","what":"First signal: C6 NVD CVE API 2.0"},{"at":"2026-11-10T19:59:23.000Z","what":"Born: second source, C15 NCSC-NL. Page EM-20261110-RR7I created."}],"stages":[{"name":"Disclosed","at":"2026-11-10T19:20:24.280Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-10T19:20:24.280Z","detail":"CVSS 9.8"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":"2026-11-10T19:59:23.000Z","detail":"1 government and CERT sources"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-10T19:20:24.280Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":4,"title":"CVE-2026-119990 (CVSS 9.8)","text":"Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119990"},{"at":"2026-11-10T19:59:23.000Z","source":"C15","sourceName":"NCSC-NL","role":"Government","severity":2,"title":"NCSC-2026-0475 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Azure","text":"Microsoft heeft meerdere kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade, zoals genoemd in onderstaande tabel. De kwetsbaarheid met kenmerk CVE-2026-119990, met een CVSS-score van 9.8 betreft ontbrekende authenticatie voor een kritieke functie in Azure OpenAI. Een…","url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0475"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-10T19:20:24.280","score":9.8,"severity":"CRITICAL","desc":"Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.","product":"","seen":1794338539165},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}