CVE-2026-40412

—

CVSS 3.1

9.8 critical

EPSS

<1%p43

Published

May 22, 2026 (May 22, 2026)

Modified

Jul 23, 2026

Description

Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.

Vendors: microsoft
Products: azure orbital spatio
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.