10 min read
CVE-2026-70352Azure AI Language+6 more
No Password Required: Inside the CVSS 10 Bug That Let Anyone Rewrite Azure AI Language Models
Microsoft quietly fixed a CVSS 10.0 flaw in Azure AI Language Authoring that needed zero credentials to tamper with deployed language models — no patch to install, no PoC, barely a paragraph of explanation. Here's what the advisory says, and what it doesn't.
Sep 15, 202610