Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-40412

Опубликовано: 21 мая 2026
Источник: msrc
CVSS3: 10
EPSS Низкий

Описание

Azure Orbital Spatio Remote Code Execution Vulnerability

Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.

FAQ

Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?

This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.

Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

N/A

EPSS

Процентиль: 42%
0.00534
Низкий

10 Critical

CVSS3

Связанные уязвимости

CVSS3: 10
nvd
3 месяца назад

Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.

CVSS3: 10
github
2 месяца назад

Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.

CVSS3: 10
fstec
3 месяца назад

Уязвимость службы развертывания и управления Azure Orbital Spatio программной платформы Microsoft Azure, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 42%
0.00534
Низкий

10 Critical

CVSS3