CVE-2026-23662
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: secure@microsoft.com (Secondary)
Description
Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.
Affected (1)
Products: Microsoft: Azure Iot Explorer
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 0.15.13 |
Related CWEs
CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
References (1)
Source: secure@microsoft.com
PatchVendor Advisory
Timeline
No history available yet.