Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NMicrosoft Azure Iot Explorer
APPMicrosoft< 0.15.13
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2026-23661HIGH7.5ten sam produkt
Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to discl...
CVE-2026-23662HIGH7.5ten sam produkt
Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose...
CVE-2026-23664HIGH7.5ten sam produkt
Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthoriz...
CVE-2026-26121HIGH7.5ten sam produkt
Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing o...
CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓ten sam vendor
Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów