CVE-2026-23659 is a high-severity information disclosure vulnerability affecting Azure Data Factory, allowing an unauthorized attacker to expose sensitive information over a network. With a CVSS score of 8.6 (High), this vulnerability is remotely exploitable with low attack complexity, requiring no privileges or user interaction, and primarily impacts confidentiality. There is currently no evidence of active exploitation, nor is public exploit code available in common repositories like Metasploit or ExploitDB. It is not listed on the CISA KEV catalog, and community discussion and media coverage remain minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:azure_data_factory:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.