CVE-2026-66803: Azure Cosmos DB Remote Code Execution Vulnerability
Published Jul 30, 2026
·Updated
Azure Cosmos DB Remote Code Execution Vulnerability
Other sources
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.
— Microsoft
Affected Software
2 affected components
Microsoft Azure Cosmos DB
Microsoft Azure Cosmos DB
Event History
Jul 30, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·08:28 PM
Data Sourced
via MITRE·08:28 PM
DescriptionSeverity
Data Sourced
via NVD·09:18 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-66803?
The severity of CVE-2026-66803 is rated as critical with a score of 10.
2
How do I fix CVE-2026-66803?
To fix CVE-2026-66803, apply the latest security updates provided by Microsoft for Azure Cosmos DB.
3
What type of vulnerability is CVE-2026-66803?
CVE-2026-66803 is a remote code execution vulnerability due to improper access control in Azure Cosmos DB.
4
Who is affected by CVE-2026-66803?
CVE-2026-66803 affects Microsoft Azure Cosmos DB users who do not implement proper access control measures.
5
What are the potential impacts of CVE-2026-66803?
The potential impacts of CVE-2026-66803 include unauthorized code execution and total compromise of affected Azure Cosmos DB instances.