← Back

Azure Cloud Shell

azure_cloud_shell

Vendor: Microsoft • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Azure Cloud Shell
May 8, 2026
May 7, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Azure Cloud Shell
Apr 14, 2026
Mar 19, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.