CVE-2026-66803Disclosure(microsoft / azure_cosmos_db)

MEDIUMCVSS 10.0 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch microsoft azure_cosmos_db systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.

4.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-284

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • azure_cosmos_db

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 9 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 6 signals
  • Disclosure: 6 classified signals
  • General: 1 classified signal
  • Peaked 3d ago at 5 mentions (2026-07-31); latest day: 1
  • 9 total mentions across 5 days

Affected systems

Vendors
Products
azure_cosmos_db

1 version affected across 1 product

Deep dive

Activity timeline9 mentions / 5d
01345Mentions · 2026-07-30: 1Mentions · 2026-07-31: 5Mentions · 2026-08-02: 1Mentions · 2026-08-07: 1Mentions · 2026-09-07: 1PoC Mentioned / Linked · 2026-07-31: 1Exploit Tool / Code · 2026-07-31: 1Patch / Workaround · 2026-07-31: 1Technical Details · 2026-07-31: 3Technical Details · 2026-08-02: 1Technical Details · 2026-08-07: 1Technical Details · 2026-09-07: 107-3007-3108-0208-0709-07
Signal classification4 categories
Disclosure
666.7%
General
111.1%
Patch
111.1%
PoC
111.1%
Referenced assets6 URLs
Classification over time
DateTotalLabels
2026-07-301
Disclosure1
2026-07-315
Disclosure2General1Patch1PoC1
2026-08-021
Disclosure1
2026-08-071
Disclosure1
2026-09-071
Disclosure1
Full discourse9 posts
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚡ Microsoft Azure Cosmos DB Remote Code Execution CVE-2026-66803, reported by the Microsoft Security Response Center, describes a Remote Code Execution vulnerability in Azure Cosmos DB with a CVSS score of 10.0. No exploit is…

    Post summary

    Microsoft disclosed CVE-2026‑66803 as a high‑severity RCE flaw in Cosmos DB, but no exploit, patch, or active exploitation details are provided.

    1000032
    88 followersView on X
  • ExploitGrid@exploitgrid
    PoC

    [CVE] CVE-2026-66803 [HIGH PRIORITY] #Azure Cosmos DB Remote Code Execution Vulnerability 🔗 https://exploitgrid.net/cve/CVE-2026-66803

    Post summary

    The tweet announces CVE-2026-66803, a high‑priority remote code execution flaw in Azure Cosmos DB, and links to exploitgrid where a proof‑of‑concept is available; no active exploitation, patch, or detailed technical info is provided.

    1000052
    29 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ #ExploitGrid Daily Threat Digest Top #Vulnerabilities (#CVEs) of the day CVE-2026-48449 CVE-2026-66803 CVE-2026-12946 CVE-2026-13435 CVE-2026-58046 ..🧵👇

    Post summary

    The post simply enumerates several CVE identifiers without providing additional context, technical details, or threat information.

    1000056
    29 followersView on X
  • IntegSec@integ_sec
    Disclosure

    CVE-2026-66803: Azure Cosmos DB Remote Code Execution Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04wShdJ0

    Post summary

    The article announces CVE-2026-66803, a remote code execution vulnerability in Azure Cosmos DB, and discusses its business implications and recommended response steps.

    0000036
    35 followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    CVE-2026-66803 - Critical improper access control in Azure Cosmos DB allows remote code execution. CVSS 10. No patch yet - apply mitigations immediately. #CVE #Azure #infosec #cvealert #cybersecurityawareness #cybersecuritytips #cybersecuritynews #devsecops  #devops #sysadmin #redteam #blueteam #hacker #tailsos #kali #linux #ubuntu #git #github #gitlab https://www.valtersit.com/cve/CVE-2026-66803

    Post summary

    The post announces CVE-2026-66803, describing it as a severe RCE flaw in Azure Cosmos DB, but does not mention PoC, exploit code, or active exploitation, and only advises immediate mitigations while a patch is pending.

    0000090
    980 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    🗄️ Azure Cosmos DB has a critical RCE flaw. CVE-2026-66803 allows unauthenticated network attackers to execute code via improper access control. CVSS 10. Patch now. #cybersecurity #ciso #azure #cto #vulnerabilities #mssp https://secalerts.co/vulnerability/CVE-2026-66803?utm_campaign=x https://t.co/wnNz2YQGCO

    Post summary

    Azure Cosmos DB’s CVE‑2026‑66803 is a critical RCE vulnerability with CVSS 10; the announcement stresses that a patch is now available.

    00000192
    872 followersView on X
  • Israel@f1tym1
    Disclosure

    Azure Cosmos DB RCE flaw CVE-2026-66803 allows unauthorized code execution over a network, posing critical risks to data security. https://ift.tt/b2g8LJ7

    Post summary

    The post announces the discovery of a critical RCE vulnerability (CVE-2026-66803) in Azure Cosmos DB, highlighting how it enables unauthorized code execution over a network, but provides no evidence of active exploitation or a PoC.

    0000051
    1.0K followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨Critical - Azure Cosmos DB Unauthenticated Network RCE via Improper Access Control (CVE-2026-66803) Improper access control in Azure Cosmos DB allows an unauthenticated remote attacker to reach code execution paths over the network. Successful exploitation yields full RCE, enabling compromise of confidentiality, integrity, and availability. 👉Affected: Microsoft Azure Cosmos DB (service)

    Post summary

    The post announces CVE‑2026‑66803, a critical Azure Cosmos DB vulnerability permitting unauthenticated remote code execution via improper access control.

    0000081
    275 followersView on X
  • Windows Forum@windowsforum
    Disclosure

    🚨 Azure Cosmos DB has a newly published remote code execution flaw—and Microsoft is offering few technical details. Cloud databases: convenient until “just patch it” becomes a mystery novel. https://windowsforum.com/security-alerts.84/cve-2026-66803-azure-cosmos-db-remote-code-execution-risk.441050/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #RemoteCodeExecution #CloudSecurity https://t.co/culznNyPE6

    Post summary

    The tweet announces a newly published remote code execution vulnerability (CVE-2026-66803) in Azure Cosmos DB but offers no technical, exploit, or patch details.

    0000057
    1.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftazure_cosmos_db---

Explore more