CVE-2026-21531

CRITICAL WAF: Medium
CVSS 9.8 Published: 2026-02-10
CWE-502

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.

WAF Coverage Analysis

Insecure Deserialization Medium WAF Coverage

OWASP: A08:2021 Software and Data Integrity Failures

944xxx - Java Attack

Affected Software

VendorProductVersion
microsoftazure_conversation_authoring_client_library1.0.0
microsoftazure_conversation_authoring_client_library1.0.0
microsoftazure_conversation_authoring_client_library1.0.0

References

Back to CVE Database