CVE-2026-87701 Azure Cosmos DB Elevation of Privilege Vulnerability

Reported by Microsoft Security Response Center

Summary by Cyber Security News17 Sep 2026, 16:00 CEST

About this summary. This is a short, independently written summary of an article first published by Microsoft Security Response Center. Cyber Security News did not report or verify the underlying story. Read the original: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87701

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.

Read the full article at Microsoft Security Response Center →

Source attribution: headline and facts are from Microsoft Security Response Center (msrc.microsoft.com). Summary method: excerpt of the source description. See our source attribution policy.