Jul 2026: Azure Cosmos DB Remote Code Execution Vulnerability
CVE-2026-66803 Published on July 30, 2026

Azure Cosmos DB Remote Code Execution Vulnerability
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.

Vendor Advisory NVD

Weakness Type

What is an Authorization Vulnerability?

The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVE-2026-66803 has been classified to as an Authorization vulnerability or weakness.


Products Associated with CVE-2026-66803

Want to know whenever a new CVE is published for Microsoft Cosmos Db? stack.watch will email you.

 

Affected Versions

Microsoft Azure Cosmos DB Version - is affected by CVE-2026-66803