Daily brief · 2026-09-19 · updated 2026-10-12

Microsoft Azure AI Foundry Developing Threat + 4 More Fixes

▶

Microsoft Azure AI Foundry

A CVSS 10.0 critical privilege-escalation vulnerability, tracked as CVE-2026-85889, has been reported in Microsoft Azure AI Foundry. This flaw stems from missing authentication for a critical function, which permits an unauthorized attacker to elevate privileges over a network. However, server-side remediation from Microsoft has not yet been independently verified.

Why it matters: If exploited, this missing authentication allows an unauthorized network attacker to elevate their privileges within the environment.

What to do: Review the Microsoft Security Response Center advisory for service-side remediation status and assess AI Foundry access controls.

CVEs: CVE-2026-85889

CrowdSec private GitHub repositories

CrowdSec confirmed that an attacker copied approximately 170 CrowdSec private GitHub repositories containing source code that was not intended for exposure. The incident occurred on May 22nd, 2026, when a known threat actor downloaded the repositories from a Canadian IP address using compromised access from a former employee. Following the unauthorized copy, CrowdSec revoked the compromised employee’s GitHub access.

Why it matters: This incident resulted in the unauthorized exposure of private CrowdSec source code.

What to do: Immediately revoke departed employees’ access, rotate exposed tokens, enforce endpoint protection, and investigate source-code access logs.

CVEs: CVE-2026-45321

SolarWinds Access Rights Manager

SolarWinds Access Rights Manager has been reported to contain an unauthenticated code-execution vulnerability caused by a hardcoded static key, bearing a published CVSS score of 8.8 High. While reported as an unauthenticated remote code execution flaw, retrieved records do not fully support classifying it as an unauthenticated remote-network issue or confirm the stated fix version.

Why it matters: An unauthenticated attacker may be able to execute code under the specific conditions reflected in the vulnerability’s CVSS vector.

What to do: Apply SolarWinds’ ARM security update after validating the vendor advisory and assess adjacent-network exposure.

CVEs: CVE-2026-28326

WaterPlum / Contagious Interview

The threat actor WaterPlum is reported to be using malware including BeaverTail, InvisibleFerret, and OtterCookie in the Contagious Interview campaign. WaterPlum has utilized BeaverTail and InvisibleFerret in this campaign since around 2023, introducing new malware around September 2024, with OtterCookie specifically capable of collecting cryptocurrency-related files and exfiltrating them to a remote server. However, specific reported totals regarding affected devices, wallets, and theft amounts remain unverified.

Why it matters: These malware strains have the capability to steal browser credentials, cryptocurrency-related material, and other sensitive victim data.

What to do: Treat unsolicited coding-test packages as hostile, isolate developer endpoints, and monitor for the listed WaterPlum indicators.

Also today

Orkes Conductor

Orkes Conductor versions prior to 3.30.2 contain an unauthenticated remote-code-execution vulnerability. Active exploitation of this vulnerability has not been confirmed by the primary retrieved source.

What to do: Upgrade affected Orkes Conductor deployments to 3.30.2 or later and restrict exposure of the workflow API until patched.

CVEs: CVE-2026-58138

Tags: microsoft-azure-ai-foundry, crowdsec-private-github-repositories, solarwinds-access-rights-manager, waterplum, orkes-conductor