CVE-2026-23655

—

CVSS 3.1

6.5 medium

EPSS

<1%p60

Published

Feb 10, 2026 (Feb 10, 2026)

Modified

Jun 17, 2026

Description

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network.

Vendors: microsoft
Products: confidential sidecar containers
Weakness: CWE-312
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news1 stories

Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities

Cisco TalosFeb 10, 23:54 UTC · Feb 10, 2026Vulnerability in the wildCVE-2026-21522 CVE-2026-23655 CVE-2026-21525+12 CVEs1

60