First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-69877

MediumCVSS 6.5/10Last modified Oct 13, 2026

Description

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Microsoft	Azure CLI	>= 2.0.0, < 1.0.7
Microsoft	Azure DevOps CLI Extension	>= 1.0.6, < 1.0.7

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69877

Timeline

Published: Oct 13, 2026
Last modified: Oct 13, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-698786.4Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.CVE-2026-69888.8A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRou CVE-2026-698807.8Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges CVE-2026-698817.5Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.CVE-2026-698827.8Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.CVE-2026-698839.8Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.CVE-2026-698847.8Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.CVE-2026-698869.8Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.CVE-2026-698897.0Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.CVE-2026-69898.8A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function TendaTelnet of the file /goform/telnet of the component CVE-2026-698907.5Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.CVE-2026-698917.0Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-69877: Medium severity, CVSS 6.5 | Vulnix