azure_web_apps vulnerabilities
CVEs whose affected-version data names the azure_web_apps package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-65816Critical· 10.0Azure Arc Elevation of Privilege Vulnerability
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
▾ MidnightMicrosoft · Azure Web AppsEPSS 0.97%via CVEORG
CVE-2026-32211Critical· 9.1Azure MCP Server Information Disclosure Vulnerability
Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.
▾ MidnightMicrosoft · Azure Web AppsEPSS 0.83%via CVEORG