CVE-2026-21226: Microsoft Azure Core Shared Client Library

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execute code over a network.

Affected products

• Microsoft Azure Core Shared Client Library: from 1.1.0, before 1.38.0 (fixed in 1.38.0)

Published 2026-01-13. Last modified 2026-06-17.