PT-2026-46405 · Microsoft · Horizondb

Sharath Unni · CVE-2026-48567 · Published 2026-06-04 · Updated 2026-07-10

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Azure HorizonDB (affected versions not specified)

Description An authentication bypass via spoofing allows an unauthorized attacker to elevate privileges over a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

BDU:2026-08349

CVE-2026-48567

Affected Products

Horizondb

References · 15

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48567 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48567 · Security Note
• https://bdu.fstec.ru/vul/2026-08349 · Security Note
• https://twitter.com/UpwindMDR/status/2062809496162914620 · Twitter Post
• https://twitter.com/integ_sec/status/2070151305100714300 · Twitter Post
• https://twitter.com/lyrie_ai/status/2075524503539495100 · Twitter Post
• https://twitter.com/lyrie_ai/status/2075524504760033639 · Twitter Post
• https://twitter.com/aviatrixtrc/status/2064731122177597855 · Twitter Post
• https://twitter.com/lyrie_ai/status/2075524505796071789 · Twitter Post
• https://twitter.com/wazuh/status/2066867876787638705 · Twitter Post
• https://twitter.com/ThreatAft/status/2063178946276126757 · Twitter Post
• https://twitter.com/forloopcodes/status/2062818285734048058 · Twitter Post
• https://twitter.com/NetSecIO/status/2064014206450455032 · Twitter Post
• https://twitter.com/lyrie_ai/status/2075524506844590546 · Twitter Post
• https://twitter.com/OrizonCyber/status/2062678300401569874 · Twitter Post