CVE-2026-85925: Microsoft Azure-Keyvault-Administration

High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.

Affected products

• Microsoft Azure-Keyvault-Administration: before 4.8.1 (fixed in 4.8.1)
• Microsoft Azure-Keyvault-Certificates: before 4.9.1 (fixed in 4.9.1)
• Microsoft Azure-Keyvault-Keys: before 4.10.1 (fixed in 4.10.1)
• Microsoft Azure-Keyvault-Secrets: before 4.11.1 (fixed in 4.11.1)

Published 2026-10-13. Last modified 2026-10-16.