{"id":"CVE-2026-77900","published":"2026-10-08T23:17:03.107","lastModified":"2026-10-10T04:18:14.030","description":"Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77900","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A critical flaw in Azure App Service allows unauthorized attackers to execute code over the network due to missing authentication for a critical function.","exploitability":"Exploitation is relatively straightforward as no authentication is required, and the attacker can execute code over the network.","blast_radius":"If exploited, the impact could be severe, potentially leading to full control over the affected Azure App Service instance.","remediation":"Disable the affected feature or ensure proper authentication mechanisms are in place for all critical functions.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","auth-bypass","web"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:43:20.173Z"}}