CVE-2026-77900: Microsoft Azure App Service For Linux

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.

Affected products

• Microsoft Azure App Service For Linux: affected versions not specified

Published 2026-10-08. Last modified 2026-10-10.