Jul 2026: Azure Cosmos DB Remote Code Execution Vulnerability
CVE-2026-66803 Published on July 30, 2026
Azure Cosmos DB Remote Code Execution Vulnerability
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2026-66803 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2026-66803
Want to know whenever a new CVE is published for Microsoft Cosmos Db? stack.watch will email you.