PT-2026-7411 · Microsoft · Azure Ai Language Authoring

Muhammad Fadilullah Dzaki · Publicado 2026-02-10 · Atualizado 2026-02-26 · CVE-2026-21531

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Azure AI Language Authoring SDK version 1.0.0

Description A flaw exists in the Azure AI Language Authoring SDK that allows an unauthorized attacker to execute code over a network. This is due to the deserialization of untrusted data. The issue is categorized as a remote code execution condition.

Recommendations Restrict access to the Azure AI Language Authoring SDK version 1.0.0. Monitor systems utilizing the Azure AI Language Authoring SDK version 1.0.0 for suspicious activity.

Correção

RCE

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

BDU:2026-01788

CVE-2026-21531

GHSA-436V-JG82-P533

Produtos afetados

Azure Ai Language Authoring

Referências · 9

• https://github.com/Azure/azure-sdk-for-python · Nota
• https://osv.dev/vulnerability/GHSA-436v-jg82-p533 · Aviso do Fabricante
• https://twitter.com/johnboston35100/status/2026826297666658373 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-01788 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21531 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-21531 · Nota de Segurança
• https://twitter.com/OstorlabSec/status/2021607888972574855 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-21531 · Aviso do Fabricante
• https://twitter.com/offseq/status/2021418962127335709 · Publicação no Twitter