What is CVE-2026-85922?

CVE-2026-85922 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Azure Key Vault Security Feature Bypass Vulnerability

Which CVE IDs does CVE-2026-85922 cover?

CVE-2026-85922 covers the following CVE IDs: CVE-2026-85922. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2026-85922?

CVE-2026-85922 has a CVSS v3 base score of 7.4, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2026-85922?

CVE-2026-85922 affects 8 products, including: azure-keyvault-administration; azure-keyvault-certificates; azure-keyvault-keys; azure-keyvault-secrets; azure-keyvault-securitydomain; and others — see the full list on the advisory page.

CVE-2026-85922HighCVSS 7.4

Azure Key Vault Security Feature Bypass Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

October 13, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-85922 →

📋 Description

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.

🎯 Affected products8

azure-keyvault-administration
azure-keyvault-certificates
azure-keyvault-keys
azure-keyvault-secrets
azure-keyvault-securitydomain
azure_security_keyvault_certificates (Rust)
azure_security_keyvault_keys (Rust)
azure_security_keyvault_secrets (Rust)

✅ Remediation

KBRelease Notes (Security Update) — fixed build 4.11.2 KBRelease Notes (Security Update) — fixed build 4.7.1 KBRelease Notes (Security Update) — fixed build 1.0.0b3 Security Update — fixed build 1.0.1

🔗 References (11)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85922
patchhttps://pypi.org/project/azure-keyvault-secrets/4.11.2/
referencehttps://github.com/Azure/azure-sdk-for-python/blob/azure-keyvault-secrets_4.11.2/sdk/keyvault/azure-keyvault-secrets/CHANGELOG.md
patchhttps://pypi.org/project/azure-keyvault-keys/4.11.2/
referencehttps://github.com/Azure/azure-sdk-for-python/blob/azure-keyvault-keys_4.11.2/sdk/keyvault/azure-keyvault-keys/CHANGELOG.md
patchhttps://pypi.org/project/azure-keyvault-certificates/4.11.2/
referencehttps://github.com/Azure/azure-sdk-for-python/blob/azure-keyvault-certificates_4.11.2/sdk/keyvault/azure-keyvault-certificates/CHANGELOG.md
patchhttps://pypi.org/project/azure-keyvault-administration/4.7.1/
referencehttps://github.com/Azure/azure-sdk-for-python/blob/azure-keyvault-administration_4.7.1/sdk/keyvault/azure-keyvault-administration/CHANGELOG.md
patchhttps://pypi.org/project/azure-keyvault-securitydomain/1.0.0b3/
referencehttps://github.com/Azure/azure-sdk-for-python/blob/azure-keyvault-securitydomain_1.0.0b3/sdk/keyvault/azure-keyvault-securitydomain/CHANGELOG.md