IT security 2026-07-25

Level Calm — 31/100 — 2026-07-25

Calm day: 4 stories ranked, 0 of the top 4 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: microsoft azure app service for linux: Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a net… (31/100).

1. microsoft azure app service for linux: Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a net… — 31/100 (CVE-2026-58630)
2. microsoft azure red hat openshift: Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges o… — 31/100 (CVE-2026-56160)
3. microsoft azure key vault: Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a netwo… — 31/100 (CVE-2026-62825)
4. microsoft azure dns: Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network. — 30/100 (CVE-2026-58275)