{"vulnerability": "cve-2026-85889", "sightings": [{"uuid": "5f2013c7-4151-465b-872f-b31684326d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85889", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117289099899956487", "content": "CVE-2026-85889 | CRITICAL flaw in Azure AI Foundry: missing authentication for a critical function (CVSS 10) allows remote privilege escalation. Microsoft patched this cloud vulnerability \u2014 verify your environment per MSRC: https://radar.offseq.com/threat/cve-2026-85889-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-ai-foundry-e4d903ee0861658f #OffSeq #Azure #Infosec #CVE202685889", "creation_timestamp": "2026-09-18T00:00:37.450987Z"}, {"uuid": "ca35877f-faf9-4f40-a768-bb62f44fcfdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85889", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvqufkqbrw2y", "content": "CVE-2026-85889: CRITICAL in Azure AI Foundry \u2014 missing authentication enables remote privilege escalation (CVSS 10). Microsoft patched server-side \u2014 confirm your environment is secure: https://radar.offseq.com/threat/cve-2026-85889-cwe-306-missing-authentication-for-critical-function-in-microsoft...", "creation_timestamp": "2026-09-18T00:00:37.773542Z"}, {"uuid": "f1e1daa2-216a-470a-8db2-0413f0317796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvquv7zptq2g", "content": "\ud83d\udea8 CVE-2026-85889 \u2014 CVSS 10 CRITICAL\n\nMissing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85889\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T00:09:23.148134Z"}, {"uuid": "3f79492a-06a6-44be-9891-9d3cd154f81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr5ulmhaj2g", "content": "CVE-2026-85889 - azure ai foundry\nAzure AI Foundry does not check who is using a key function, so someone on the network who should not have permission can raise their rights to act like an administrator. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:50:05.585472Z"}, {"uuid": "e3429583-21af-4c4c-86a5-1a25378ec98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvrfbdbiac2y", "content": "Daily IT Security Digest \u2014 2026-09-18\ninput in $dataType, $part, and $unit parameters.\n- **D-Link DI-8300 RCE** (CVE-2026-91003): Stack buffer overflow in /rzgl.asp enables remote code execution; public exploit code is available.\n- **Azure AI Foundry Privilege Escalation** (CVE-2026-85889): Missing", "creation_timestamp": "2026-09-18T05:02:28.967880Z"}, {"uuid": "6f5d3ca6-6db1-4575-b7d0-6129e8fcac47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvsdmc4zxn2v", "content": "Microsoft fixed a maximum-severity Azure AI Foundry flaw (CVE-2026-85889, CVSS 10.0) enabling privilege escalation without authentication; no customer action is required.\n", "creation_timestamp": "2026-09-18T14:05:29.725568Z"}, {"uuid": "f8fa74cc-9b41-41f6-8b68-d585126910bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvsdhrgtvx2v", "content": "Microsoft fixed a maximum-severity Azure AI Foundry flaw (CVE-2026-85889, CVSS 10.0) enabling privilege escalation without authentication; no customer action is required.\n", "creation_timestamp": "2026-09-18T14:02:58.036504Z"}, {"uuid": "6caf82ed-62b8-4ecc-8b98-53a16ed5b6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvsdmj777q2l", "content": "Microsoft fixed a maximum-severity Azure AI Foundry flaw (CVE-2026-85889, CVSS 10.0) enabling privilege escalation without authentication; no customer action is required.\n", "creation_timestamp": "2026-09-18T14:05:37.190641Z"}, {"uuid": "e98815d3-1b56-4f8f-b433-3c4d7d4138a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85889", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3mvsgacai3r2t", "content": "Microsoft corrige fallo cr\u00edtico en Azure AI Foundry con CVE-2026-85889\n\nUn fallo de autenticaci\u00f3n en Azure AI Foundry permite escalada de privilegios\u2026\n\nhttps://mentehackers.com/microsoft-corrige-fallo-critico-en-azure-ai-foundry-con-cve-2026-85889-baffdffe\n#Ciberseguridad #IA #Tecnologia", "creation_timestamp": "2026-09-18T14:52:28.861980Z"}, {"uuid": "190a51aa-8b4d-4121-b5ea-02c617040af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvshzdz4m62u", "content": "\ud83e\udd16 CVE-2026-85889 (CVSS 10.0): missing authentication in Azure AI Foundry lets an unauthenticated attacker elevate privileges over the network. Patched, no customer action required.\n\nhttps://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html", "creation_timestamp": "2026-09-18T15:24:22.362963Z"}, {"uuid": "94461230-db26-4079-ad52-c3420a60843f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117292797631774094", "content": "If you missed this, Microsoft patched this vulnerability yesterday:\nCVE-2026-85889: Azure AI Foundry Elevation of Privilege Vulnerability (new) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85889\nMore:\nThe Hacker News: Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html @thehackernews #infosec #vulnerability #Microsoft #Azure", "creation_timestamp": "2026-09-18T15:40:58.836191Z"}, {"uuid": "fd360d7c-149f-42cf-b82d-a9bc8f9078cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html", "content": "Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required.\n\nThe vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0.\n\n\"Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network,\"", "creation_timestamp": "2026-09-18T16:00:37.313391Z"}, {"uuid": "88359570-eade-46c5-822c-a1a60de97113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvskzm6hyi23", "content": "Azure AI Foundry \u306b\u8a8d\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027 (CVE-2026-85889) \u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u6a29\u9650\u6607\u683c\u304c\u53ef\u80fd\u3002\u4fee\u6b63\u6e08\u307f\u3002", "creation_timestamp": "2026-09-18T16:18:12.584001Z"}, {"uuid": "31a6337a-e340-4134-9e18-b721d1c7e7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "Telegram/Zwhpyrr_oHIPZkOmsbpRS6DJea6Ieye3YqU8trO1W22uDg", "content": "", "creation_timestamp": "2026-09-18T18:00:06.721620Z"}, {"uuid": "64fbba35-286f-4f88-a56a-a846f0da7a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "Telegram/Zwhpyrr_oHIPZkOmsbpRS6DJea6Ieye3YqU8trO1W22uDg", "content": "", "creation_timestamp": "2026-09-19T00:00:12.091508Z"}, {"uuid": "7e0af1b0-b9ae-482f-a521-a4c4b4221298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html", "content": "Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required.\n\nThe vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0.\n\n\"Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network,\"", "creation_timestamp": "2026-09-19T01:00:33.540291Z"}, {"uuid": "69f50d0a-447f-4c6b-87de-311d79d604d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://bsky.app/profile/serena666.bsky.social/post/3mvunenjeeh2b", "content": "Wild to see a CVSS 10.0 flaw in Azure AI Foundry, CVE-2026-85889, due to missing auth. This proves even foundational AI platforms aren't immune to basic security oversights. We gotta harden our stacks from the ground up.", "creation_timestamp": "2026-09-19T12:05:30.463876Z"}, {"uuid": "ad0bab3f-468e-4ed8-97dd-208b0338d0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85889", "type": "seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mvvb7eid2q2g", "content": "CVE-2026-85889 Azure AI Foundry fix was server-side; Atlas 8 sleep leaves fans on; AM5 AGESA 1.3.0.1d beta targets CXMT DDR5; RX 9070 XT: don't reuse modular PSU leads; 29617\u219229639 SAFE_OS 0x80070057 (2 replies). +21 stories, 30 joined", "creation_timestamp": "2026-09-19T18:00:27.965916Z"}, {"uuid": "7e0397aa-d039-4821-ac61-b144ea79cfc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85889", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvvbasiogw2c", "content": "Microsoft fixed a missing-auth flaw in Azure AI Foundry \u2014 CVSS 10.0, unauthenticated privilege escalation\u2026 https://0daynews.com/articles/2026-09-19-azure-ai-foundry-cve-2026-85889-cvss10-privilege-escalation/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2610", "creation_timestamp": "2026-09-19T18:01:15.686331Z"}]}