VDB
CVE-2026-88132
CVE-2026-88132
PUBLISHED
CVSS 5.9 MEDIUM
Reported by microsoft · Published October 13, 2026
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
Risk Scores
CVSS 3.1
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Azure Key Vault Client SDK | - |
| Microsoft | azure-keyvault-administration | 4.7.1 |
| Microsoft | azure-keyvault-certificates | 4.11.2 |
| Microsoft | azure-keyvault-keys | 4.11.2 |
| Microsoft | azure-keyvault-secrets | 4.11.2 |
| Microsoft | azure-keyvault-keys | 4.11.2 |
| Microsoft | Azure Key Vault Client SDK | - |
| Microsoft | azure-keyvault-secrets | 4.11.2 |
| Microsoft | azure-keyvault-certificates | 4.11.2 |
| microsoft | azure_keyvault_keys | 4.11.2 |
| microsoft | azure_keyvault_administration | 4.7.1 |
| microsoft | azure_keyvault_certificates | 4.11.2 |
| microsoft | azure_key_vault_client_sdk | - |
| Microsoft | azure-keyvault-administration | 4.7.1 |
| microsoft | azure_keyvault_secrets | 4.11.2 |
Timeline
- Oct 13, 2026 CVE Published
- Oct 14, 2026 EPSS Score
- Oct 14, 2026 Coalition ESS Score
- Oct 15, 2026 CVE Updated
- Oct 16, 2026 Security Advisory
References
- Azure Key Vault Information Disclosure Vulnerability vendor-advisorypatch