CVE-2026-35425

HIGH

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

StatusReceived

설명

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

Score Summary

CVSS Score: 8.0
Version: 3.1
VPI: 80
Why this VPI (explainable, experimental)
VPI breakdown
Impact 80.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 80.00
VPI formula vpi-v1
EPSS: 0.5%
(상위 38.8%)
Attack Vector: Network
High Complexity
High Privileges
No User Interaction
Scope Changed
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

CWE Weakness Classification

References (1)

Impact	80.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	80.00