CVE-2026-63508

—

CVSS 3.1

10.0 critical

EPSS

<1%p43

Published

Aug 7, 2026 (Aug 7, 2026)

Modified

Aug 7, 2026

Description

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.

Vendors: microsoft
Products: planetary computer
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news1 stories

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply

The Hacker NewsAug 10, 15:03 UTC · Aug 10, 2026Ransomware in the wildCVE-2026-34348 CVE-2026-18497 CVE-2026-63508+43 CVEs1