Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4356 articles · 196349 vulns · 36/41 feeds (7d)
← Back to list
10.0
CVE-2026-66803PATCHED
microsoft · azure_cosmos_db

Azure Cosmos DB Remote Code Execution Vulnerability

Description

Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.

Affected Products

VendorProductVersions
microsoftazure_cosmos_db-

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftmicrosoft azure cosmos dbcert_advisory90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66803(vendor-advisory, patch)

Related News (4 articles)

Tier B
BSI Advisories20d ago
[NEU] [hoch] Microsoft Azure Cosmos DB: Schwachstelle ermöglicht Codeausführung
→ No new info (linked only)
Tier B
CERT-FR24d ago
Vulnérabilité dans Microsoft Azure (31 juillet 2026)
→ No new info (linked only)
Tier C
VulDB24d ago
CVE-2026-66803 | Microsoft Azure Cosmos DB access control
→ No new info (linked only)
Tier A
Microsoft MSRC24d ago
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability
→ No new info (linked only)
CVSS 3.110.0 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66803
CWECWE-284
PublishedJul 30, 2026
Last enriched24d ago
Trending Score7
Source articles4
Independent4
Info Completeness7/14
Missing: title, description, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-69836EXPKEV
Microsoft Entra ID Remote Code Execution Vulnerability
Trending: 125
CRITICALCVE-2026-55040EXPKEV
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Trending: 84
CRITICALCVE-2026-50522EXPKEV
Microsoft SharePoint Remote Code Execution Vulnerability
Trending: 77
HIGHCVE-2026-68820EXPKEV
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Trending: 71
HIGHCVE-2026-45586EXPKEV
Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability
Trending: 63

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jul 30, 2026
Discovered by ZDM
Jul 30, 2026
Patch Available
Aug 19, 2026