{"vulnerability": "cve-2026-77900", "sightings": [{"uuid": "614d3525-007d-4764-a057-7c7efd044891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfleirgee2o", "content": "CVE-2026-77900 - azure app service for linux\nA function in Azure App Service for Linux does not require authentication, so an attacker on the network could run their own code on the service. This could let them\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:10:04.299797Z"}, {"uuid": "33e35e91-340c-4636-a10a-e4e5a1b03a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfooty26k2o", "content": "\ud83d\udea8 CVE-2026-77900 \u2014 CVSS 9.8 CRITICAL\n\nMissing authentication for critical function in Azure App Service allows an unauthorized attacker to execut...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77900\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:32.766531Z"}, {"uuid": "dfdb7d11-1b95-4d4f-a132-ce758135505f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77900", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117409069502341938", "content": "Microsoft Azure App Service for Linux hit by CVE-2026-77900 (CRITICAL, CVSS 9.8): missing authentication enables unauthenticated remote code execution. Patch released \u2014 update now. https://radar.offseq.com/threat/cve-2026-77900-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-app-service-for-806c7a8fa62ffe41 #OffSeq #Azure #CVE202677900 #Infosec #CloudSecurity", "creation_timestamp": "2026-10-09T04:30:26.414795Z"}, {"uuid": "5cb73e17-4d05-4ec8-a772-7908ab687ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77900", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxg5bfurif2y", "content": "CRITICAL: CVE-2026-77900 in Azure App Service for Linux lets attackers run code remotely with no auth (CVSS 9.8). Official fix available \u2014 apply immediately. https://radar.offseq.com/threat/cve-2026-77900-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-app-service-for-806c...", "creation_timestamp": "2026-10-09T04:30:29.145748Z"}, {"uuid": "2043096d-df3c-4a86-ac54-965ff714c937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117411489566980271", "content": "Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.\n\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high) \nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high) \n#microsoft #CVE", "creation_timestamp": "2026-10-09T14:47:00.295328Z"}]}