Findings

CVE-2026-83943

Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.

Published Oct 8, 2026 · updated Oct 14, 2026 · Microsoft Azure API Center

Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 8, 2026 · NIST NVD

    Detected

    Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.

Affected

  • vendor Microsoft Azure API Centerversion unspecified

Sources

  • CIRCL Vulnerability LookupVulnerability recordCVE-2026-83943

    Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.

    vulnerability.circl.lu
  • CVE.orgVulnerability recordCVE-2026-83943

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-83943

    30-day exploitation probability 0.4%

    first.org
  • NCSC NetherlandsGovernment advisoryCVE-2026-83943

    Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten, zoals Key Vault, DevOps, API center en Storage. Een kwaadwillende kan de kwetsbaarheden misbruiken om beveiligingsmaatregelen te omzeilen, zich verhoogde rechten toe te kennen, willekeurige code uit te voeren

    advisories.ncsc.nl
  • NIST NVDVulnerability recordCVE-2026-83943

    Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.

    nvd.nist.gov

References