Microsoft published CVE-2026-35428 on May 7, 2026, describing a critical Azure Cloud Shell spoofing vulnerability caused by command-injection weakness, already mitigated by Microsoft, requiring no customer action, and assessed with confirmed report confidence but no public disclosure or...
CVE-2026-32169 has landed in Microsoft’s Security Update Guide as an Azure Cloud Shell elevation-of-privilege vulnerability, but the public record at this stage appears sparse on the exact technical mechanics. That combination matters because Cloud Shell sits at the intersection of identity...