CVE-2026-83943: Azure API Center Information Disclosure Vulnerability
Published Oct 8, 2026
·Updated
Azure API Center Information Disclosure Vulnerability
Other sources
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.
— Microsoft
Affected Software
2 affected components
Microsoft Azure API Center
Microsoft Azure API Center
Event History
Oct 8, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·10:15 PM
Data Sourced
via MITRE·10:15 PM
DescriptionSeverity
Data Sourced
via NVD·11:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an authenticated Azure API Center account or user interaction?
No. The vulnerability is rated with no privileges required and no user interaction required. Exploitation is assessed as network-based, although attack complexity is high.
2
What is the assessed impact if exploitation succeeds?
The assessment indicates high confidentiality and integrity impact, with no availability impact. The scope is rated as changed, meaning the impact can extend beyond the initially affected security authority.