CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-87701 — Improper neutralization of special elements in output used by a downstream compo...

·Source: NIST NVD

Updated:

Executive Summary

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.

Analysis

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network. CVSS Score: 9.6. Published: 2026-09-17T23:18:53.623.

Indicators of Compromise (1)

CVE (1)
CVE-2026-87701
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 17, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Iranian accused of hacking American universities extradited from Montenegro

An Iranian national accused by the U.S. of taking part in dozens of breaches involving the theft of academic data and intellectual property has been extradited from Montenegro.

The Record
MEDIUMVulnerability

Sibos 2026: What does a successful ESG strategy look like?

How can global financial institutions maintain a coherent sustainability strategy with constantly shifting expectations? This was discussed at Sibos Miami 2026 by a panel of experts.

Finextra
MEDIUMVulnerability

Give yourself room to be human

In this week’s edition, Amy reflects on the importance of prioritizing family and personal well-being over the pressure to remain constantly productive.

Cisco Talos