Sécurité IT 2026-07-25

Niveau Calme — 31/100 — 2026-07-25

Journée « Calme » : 4 sujets classés, 0 des 4 premiers signalés comme activement exploités, 0 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : microsoft azure app service for linux: Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a net… (31/100).

1. microsoft azure app service for linux: Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a net… — 31/100 (CVE-2026-58630)
2. microsoft azure red hat openshift: Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges o… — 31/100 (CVE-2026-56160)
3. microsoft azure key vault: Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a netwo… — 31/100 (CVE-2026-62825)
4. microsoft azure dns: Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network. — 30/100 (CVE-2026-58275)