CVE-2026-21226

—

CVSS 3.1

7.5 high

EPSS

<1%p55

Published

Jan 13, 2026 (Jan 13, 2026)

Modified

Jun 17, 2026

Description

Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execute code over a network.

Vendors: microsoft
Products: azure core shared client library
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.