Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5856 articles · 234019 vulns · 35/41 feeds (7d)
← Back to list
9.8
CVE-2026-77900PATCHED
Microsoft · Azure App Service for Linux

Azure App Service Remote Code Execution Vulnerability

Description

Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.

Affected Products

VendorProductVersions
MicrosoftAzure App Service for Linux-

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftazurecert_advisory90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77900(vendor-advisory, patch)

Related News (4 articles)

Tier C
Cisco Talos50m ago
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
→ No new info (linked only)
Tier B
BSI Advisories4d ago
[NEU] [hoch] Microsoft Azure: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB4d ago
CVE-2026-77900 | Microsoft Azure App Service missing authentication
→ No new info (linked only)
Tier A
Microsoft MSRC5d ago
CVE-2026-77900 Azure App Service Remote Code Execution Vulnerability
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77900
CWECWE-306
PublishedOct 8, 2026
Last enriched4d ago
Trending Score64
Source articles4
Independent4
Info Completeness7/14
Missing: title, description, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-96951EXPKEV
Windows Shell Security Feature Bypass Vulnerability
Trending: 132
HIGHCVE-2026-85880EXPKEV
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Trending: 82
HIGHCVE-2026-81963EXPKEV
Windows Update Stack Elevation of Privilege Vulnerability
Trending: 81
CRITICALCVE-2026-88131
Microsoft Dataverse Remote Code Execution Vulnerability
Trending: 64
CRITICALCVE-2026-94510
Microsoft Bookings Elevation of Privilege Vulnerability
Trending: 60

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 8, 2026
Discovered by ZDM
Oct 8, 2026
Patch Available
Oct 13, 2026