CVE-2026-48567Disclosure(microsoft / azure_horizondb)

MEDIUMCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (4 mentions)

Immediate actions

Patch microsoft azure_horizondb systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.

microsoft CVEs Back to dashboard

4.3/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48567

Weakness type (CWE)

CWE-290

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

azure_horizondb

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
15 mentions across 8 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 8 signals
Technical details provided in 12 signals
Disclosure: 7 classified signals
Peaked at 4 mentions on most recent observed day (2026-07-10)
15 total mentions across 8 days

Affected systems

Vendors

microsoft

Products

azure_horizondb

1 version affected across 1 product

Deep dive

Activity timeline15 mentions / 8d

Signal classification4 categories

Disclosure

746.7%

Patch

640.0%

Active Exploitation

16.7%

General

16.7%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-04	1	Patch1
2026-06-05	3	Disclosure1Patch2
2026-06-06	1	Disclosure1
2026-06-08	1	Patch1
2026-06-10	3	Active Exploitation1Disclosure2
2026-06-16	1	Patch1
2026-06-25	1	General1
2026-07-10	4	Disclosure3Patch1

Full discourse15 posts

Wazuh@wazuh125d
Patch
Microsoft Azure HorizonDB is affected by CVE-2026-48567 (CVSS 10.0 - Critical), an authentication bypass flaw that allows unauthenticated privilege escalation over a network. Apply Microsoft's security updates. Read more: https://cti.wazuh.com/vulnerabilities/cves/CVE-2026-48567 https://t.co/dp2j9LmbWG
Post summary
The post reports a critical authentication bypass in Azure HorizonDB and urges users to apply Microsoft’s security updates; it provides basic technical details but no exploit or PoC information.
080100484
8.1K followersView on X
إبراهيم بوحيمد | Ibrahim Buhaimed@buhaimedi136d
Patch
ثغرتين في خدمات Microsoft السحابية بتقييم 10 و 9.1… وكلها تمت معالجتها وإغلاقها الثغرة الاولى في في Azure HorizonDB 📍 تقييمها CVSS 10 📍ـ CVE-2026-48567 نوعها Authentication Bypass by Spoofing. بإمكان مهاجم غير مصرح له تجاوز المصادقة عن طريق الانتحال، وبعدها يرفع صلاحياته عبر الشبكة. الثغرالثانية في Microsoft Exchange Online 📍 تقييمها CVSS 9.1 📍ـ CVE-2026-48579 نوعها Information Disclosure بسبب Improper Authorization. بإمكان مهاجم غير مصرح له يستغل خلل في الصلاحيات ويكشف معلومات عبر الشبكة. ـ Microsoft وضحت أن الثغرتين تم اغلاقهم طرفها ولايحتاج اي تدخل من قبل المستخدمين
Post summary
Microsoft disclosed and patched two high‑CVSS cloud vulnerabilities (CVE‑2026‑48567 and CVE‑2026‑48579); no PoC, exploit code, or active exploitation is mentioned.
010851.3K
50.0K followersView on X
forloop@forloopcodes136d
Patch
Azure HorizonDB authentication bypass: CVE-2026-48567 CVSS 10.0. Unauthenticated attacker elevates privileges over network. Exclusively-hosted service - Microsoft controls patch. NVD + MSRC. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48567
Post summary
Microsoft has disclosed a critical authentication bypass in Azure HorizonDB (CVE-2026-48567) with a CVSS score of 10.0, noting that it can be patched by the vendor.
00030292
9.0K followersView on X
Orizon@OrizonCyber137d
Patch
🚨 CVE-2026-48567 — CVSS 10/10 ██████████ Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/gkLemXYEdD
Post summary
CVE-2026-48567 is a critical authentication bypass in Azure HorizonDB with CVSS 10/10; a patch is now available, but no exploit or PoC details were disclosed.
10010112
54 followersView on X
Lyrie.ai@lyrie_ai101d
Patch
Full Tweet Microsoft Azure HorizonDB is affected by CVE-2026-48567 (CVSS 10.0 - Critical), an authentication bypass flaw that allows unauthenticated privilege escalation over a network. Apply Microsoft's security updates.
Post summary
Microsoft Azure HorizonDB’s CVE‑2026‑48567 is a critical authentication bypass that can lead to unauthenticated privilege escalation; vendors have published security updates that should be applied promptly.
1000052
308 followersView on X
Lyrie.ai@lyrie_ai101d
Disclosure
Source: X search for CVE-2026 critical Posted: 2026-06-16T12:57:57.000Z Likes: 10 0day Intel: Microsoft Azure HorizonDB is affected by CVE-2026-48567 (CVSS 10.0 - Critical),
Post summary
A new critical vulnerability (CVE-2026-48567) affecting Microsoft Azure HorizonDB has been identified with a CVSS score of 10.0, but no proof‑of‑concept, exploit, or mitigation details are provided.
1000052
308 followersView on X
Lyrie.ai@lyrie_ai101d
Disclosure
CVE-2026-48567: Microsoft Azure HorizonDB is affected by CVE-2026-48567 (CVSS 10.0 - Critical), an authentication bypass flaw that allows unauthenticated privilege escalation over a network. Apply Microsoft's security updates. Read more:
Post summary
Microsoft Azure HorizonDB is vulnerable to a critical authentication bypass (CVE-2026-48567) that permits unauthenticated privilege escalation; users are advised to apply Microsoft security updates.
1000065
308 followersView on X
Lyrie.ai@lyrie_ai101d
Disclosure
0day Intel: Microsoft Azure HorizonDB is affected by CVE-2026-48567 (CVSS 10.0 - Critical),
Post summary
Microsoft Azure HorizonDB is reported to be affected by a new critical vulnerability (CVE-2026-48567) with a CVSS score of 10.0.
1000056
308 followersView on X
kawn@kawn2020131d
Disclosure
#windowsupdate #microsoft つづき・CVE-2026-44815　9.8　Windows DHCP クライアント・CVE-2026-45657　9.8　Windows カーネル・CVE-2026-47291　9.8　Windows HTTP.sys ・CVE-2026-47643　9.8　Azure Stack Edge ・CVE-2026-48567　10　 Azure HorizonDB
Post summary
The tweet merely announces a set of high‑severity CVEs affecting Windows and Azure components, lacking any PoC, exploit, active use, or mitigation information.
10000184
85 followersView on X
kawn@kawn2020131d
Disclosure
#windowsupdate #microsoft つづき・CVE-2026-47655　6.5　Microsoft Graph ・CVE-2026-48567　10　 Azure HorizonDB ・CVE-2026-48579　9.1　Microsoft Exchange Online －CVSS 基本値が 9.8 以上のもの：6 件・CVE-2026-26142　9.8　Nuance PowerScribe つづく…
Post summary
Announcement of several newly disclosed CVEs with their CVSS scores and affected Microsoft products, without further technical context or mitigation details.
1000085
85 followersView on X
Cyber Netsec IO@NetSecIO133d
Patch
🔥 CRITICAL ALERT: Two CVSS 10.0 vulnerabilities disclosed! 🚨 Unauthenticated bypass in Azure HorizonDB (CVE-2026-48567) & RCE in DbGate (CVE-2026-47668) pose extreme risk to cloud environments. Patch and restrict access NOW! #CVE #RCE #CyberSecurity 🌐 cyber[.]netsecops[.]io https://t.co/nfPrjtoRA2
Post summary
The tweet announces two critical CVSS 10.0 vulnerabilities (unauthenticated bypass in Azure HorizonDB and RCE in DbGate) and urges immediate patching and access restrictions to mitigate the risk.
0001068
59 followersView on X
IntegSec@integ_sec116d
General
CVE-2026-48567: Azure HorizonDB Authentication Bypass - What It Means for Your Business and How to Respond https://hubs.li/Q04mF38b0
Post summary
The text references CVE-2026-48567, an Azure HorizonDB authentication bypass, but provides no additional details on PoC, exploits, patches, or active exploitation.
0000036
31 followersView on X
Aviatrix Threat Research Center@aviatrixtrc131d
Active Exploitation
TRC analysis shows attackers exploiting CVE-2026-48567 in Azure HorizonDB then escalating via Windows Collaborative Translation Framework. The attack chain demonstrates how initial cloud compromises enable lateral movement across hybrid environments. Runtime segmentation helps contain such post-breach pivoting. 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/microsoft-patch-tuesday-june-2026-206-vulnerabilities
Post summary
The report confirms that attackers are actively exploiting CVE-2026-48567 in Azure HorizonDB, using the breach to pivot across hybrid environments, while runtime segmentation can mitigate lateral movement.
0000026
1.9K followersView on X
ThreatAft@ThreatAft135d
Disclosure
🚨 CRITICAL: Azure HorizonDB Authentication Bypass — CVE-2026-48567 • CVSS 9.7 — unauthenticated, remote, no user interaction • Attacker spoofs credentials → bypasses auth → elevated privileges 🔗 https://threataft.com/articles/cve-2026-48567-azure-horizondb-auth-bypass #CyberSecurity #Azure #CVE2026 #CloudSecurity
Post summary
Azure HorizonDB has a newly disclosed critical authentication bypass (CVE‑2026‑48567) with a CVSS score of 9.7 that allows attackers to spoof credentials and gain elevated privileges.
0000081
27 followersView on X
Upwind Security MDR@UpwindMDR136d
Disclosure
🚨Critical - Azure HorizonDB Authentication Bypass by Spoofing (CVE-2026-48567) Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network. Successful exploitation can lead to high impact on integrity and availability with changed scope. Affected versions: • Azure HorizonDB (all versions prior to the latest security update) Impact: • No authentication required (Network, Low complexity) • Authentication bypass by spoofing (CWE-290) 👉Upgrade to the latest Azure HorizonDB security update
Post summary
An authentication bypass (CVE‑2026‑48567) in Azure HorizonDB permits privilege escalation without authentication, impacting integrity and availability; users should apply the latest security update to mitigate.
0000067
207 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	azure_horizondb	-	-	-

Explore more

Back to dashboard microsoft CVEs azure_horizondb vulnerabilities

What researchers are saying

CVE-2026-48567

إبراهيم بوحيمد | Ibrahim Buhaimed[verified]@buhaimediPatch

Microsoft disclosed and patched two high‑CVSS cloud vulnerabilities (CVE‑2026‑48567 and CVE‑2026‑48579); no PoC, exploit code, or active exploitation is mentioned.

forloop[verified]@forloopcodesPatch

Microsoft has disclosed a critical authentication bypass in Azure HorizonDB (CVE-2026-48567) with a CVSS score of 10.0, noting that it can be patched by the vendor.

Orizon[verified]@OrizonCyberPatch

CVE-2026-48567 is a critical authentication bypass in Azure HorizonDB with CVSS 10/10; a patch is now available, but no exploit or PoC details were disclosed.

Lyrie.ai[verified]@lyrie_aiPatch

Microsoft Azure HorizonDB’s CVE‑2026‑48567 is a critical authentication bypass that can lead to unauthenticated privilege escalation; vendors have published security updates that should be applied promptly.

Lyrie.ai[verified]@lyrie_aiDisclosure

A new critical vulnerability (CVE-2026-48567) affecting Microsoft Azure HorizonDB has been identified with a CVSS score of 10.0, but no proof‑of‑concept, exploit, or mitigation details are provided.

Lyrie.ai[verified]@lyrie_aiDisclosure

Microsoft Azure HorizonDB is vulnerable to a critical authentication bypass (CVE-2026-48567) that permits unauthenticated privilege escalation; users are advised to apply Microsoft security updates.

Lyrie.ai[verified]@lyrie_aiDisclosure

Microsoft Azure HorizonDB is reported to be affected by a new critical vulnerability (CVE-2026-48567) with a CVSS score of 10.0.

Cyber Netsec IO[verified]@NetSecIOPatch

The tweet announces two critical CVSS 10.0 vulnerabilities (unauthenticated bypass in Azure HorizonDB and RCE in DbGate) and urges immediate patching and access restrictions to mitigate the risk.