Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
Read the full article at Microsoft Security Response Center →
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
About this summary. This is a short excerpt from the description that Microsoft Security Response Center published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105014
Source attribution: headline and facts are from Microsoft Security Response Center (msrc.microsoft.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
CVE-2026-70007 .NET Framework Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-62765 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-83519 Windows Error Reporting Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-102870 ASP.NET Core Remote Code Execution Vulnerability
Updated product information in the Software Update table. This is an informational change only.
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability
Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has…
CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.