{"id":7154,"date":"2026-11-10T16:00:00","date_gmt":"2026-11-10T16:00:00","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication"},"modified":"2026-11-10T16:00:00","modified_gmt":"2026-11-10T16:00:00","slug":"azure-openai-cve-2026-119990-missing-authentication","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/azure-openai-cve-2026-119990-missing-authentication","title":{"rendered":"Azure OpenAI CVE-2026-119990: Microsoft Discloses a CVSS 9.8 Missing-Auth Flaw, Already Mitigated"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Microsoft has published a critical security record for its own Azure OpenAI service. <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-119990\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2026-119990<\/a>, dated November 10, 2026, describes &#8220;missing authentication for a critical function in Azure OpenAI&#8221; that &#8220;allows an unauthorized attacker to elevate privileges over a network.&#8221; Microsoft and the <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-119990\" target=\"_blank\" rel=\"noreferrer noopener\">National Vulnerability Database<\/a> both score it 9.8, the top end of the CVSS 3.1 scale: network-reachable, low complexity, no privileges and no user interaction required, with high impact on confidentiality, integrity and availability.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What it is:<\/strong> A missing-authentication (CWE-306) elevation-of-privilege flaw in the Azure OpenAI service, published on November 10, 2026 as CVE-2026-119990.<\/li><li><strong>Severity:<\/strong> CVSS 3.1 9.8 (Critical). Microsoft also labels the severity Critical. Exploit code maturity is listed as unproven; Microsoft&#8217;s exploit status is &#8220;not exploited.&#8221;<\/li><li><strong>Customer action:<\/strong> Microsoft says it has already fully mitigated the vulnerability on the service. &#8220;There is no action for users of this service to take.&#8221; The CVE exists &#8220;to provide further transparency.&#8221;<\/li><li><strong>Affected build:<\/strong> Third-party trackers summarizing the MSRC record list Azure OpenAI builds from 1.0.0 through the fix identified as <code>hyena-infra-build-official\/20260923.14<\/code>.<\/li><li><strong>Not in CISA KEV:<\/strong> As of the November 10 updates, the CVE is not listed in CISA&#8217;s Known Exploited Vulnerabilities catalog, and Microsoft reports no known exploitation.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cloud services rarely get classic &#8220;install this patch&#8221; CVEs, because the vendor can fix the running service without a customer update. Microsoft has been publishing those service-side issues anyway, under a transparency program it has described as &#8220;unveiling Cloud Service CVEs.&#8221; CVE-2026-119990 is one of those records.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The description is short and severe. Authentication was missing on a &#8220;critical function,&#8221; and an attacker who could reach that function over the network could elevate privileges, with high impact across confidentiality, integrity and availability. The <a href=\"https:\/\/github.com\/advisories\/GHSA-298x-8vc9-pjwx\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Advisory Database<\/a> entry, imported from NVD, classifies the weakness as CWE-306.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft updated the &#8220;Customer Action Required&#8221; text and FAQ on the same day the CVE was published, to make the operational point unambiguous: the company has already mitigated the issue, and customers do not have a patch or configuration step to apply. The purpose of the CVE, Microsoft says, is disclosure, not a call to action.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What we still do not know<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft has not, in the public CVE text, named the exact API, portal feature or control-plane function that lacked authentication, or said how long the condition was present before the September 23, 2026-dated fixed build. It also has not published a technical write-up of the privilege that could have been gained. That is typical of cloud-service CVEs, but it leaves outside observers unable to judge residual risk in logs or custom integrations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The CVSS vector (AV:N\/AC:L\/PR:N\/UI:N) describes a worst-case, unauthenticated, remote path. Whether that path was practically reachable from the public internet, or only in a narrower service-to-service context, is not spelled out in the advisory.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">For Azure OpenAI customers<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft&#8217;s position is that no action is required. That is only as reassuring as your trust in the mitigation and in the &#8220;not exploited&#8221; status. Firms that log Azure activity should still review unusual privilege or identity changes around the disclosure window, not because Microsoft has reported exploitation, but because a 9.8 cloud CVE is the kind of record auditors will ask about.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">For security teams<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Treat this as a reminder that &#8220;we patched the service for you&#8221; still belongs in a vulnerability register. Record the CVE, the vendor statement, and the date. If you run other Azure AI services, watch the MSRC update guide for related cloud CVEs rather than waiting for a VM patch Tuesday bulletin.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">For the industry<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A 9.8 on a hosted model API, even when already fixed, is a signal of how much privilege now sits behind a single cloud function. Missing authentication on that class of service is not a theoretical bug class; it is one of the highest-impact failures a cloud AI platform can have.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u270d\ufe0f About the analysis<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This i10x report is based on Microsoft&#8217;s MSRC entry for CVE-2026-119990, the NVD record, and the GitHub Advisory Database entry as of November 11, 2026. i10x did not independently verify the internal Azure OpenAI function that was affected.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-119990\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Security Response Center: CVE-2026-119990<\/a><\/li><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-119990\" target=\"_blank\" rel=\"noreferrer noopener\">NVD: CVE-2026-119990<\/a><\/li><li><a href=\"https:\/\/github.com\/advisories\/GHSA-298x-8vc9-pjwx\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Advisory Database: GHSA-298x-8vc9-pjwx<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>On November 10, 2026, Microsoft published CVE-2026-119990, a critical missing-authentication vulnerability in Azure OpenAI scored 9.8. The company says the flaw has already been fully mitigated on the service side and that customers do not need to take action.<\/p>\n","protected":false},"author":2,"featured_media":7153,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"critical","_nx_sec_affected":"Azure OpenAI","_nx_sec_status":"mitigated","_nx_sec_kicker":"CRITICAL: Azure OpenAI had a CVSS 9.8 missing-auth flaw"},"categories":[65,11,23,12,28],"tags":[],"companies":[43],"products":[],"class_list":["post-7154","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-security","category-infrastructure","category-microsoft","category-policy-safety","category-security-defense","company-microsoft"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Azure OpenAI CVE-2026-119990: CVSS 9.8, Already Mitigated<\/title>\n<meta name=\"description\" content=\"Microsoft published CVE-2026-119990 on November 10: a CVSS 9.8 missing-auth bug in Azure OpenAI, already fully mitigated. No customer action is required.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Azure OpenAI CVE-2026-119990: CVSS 9.8, Already Mitigated\" \/>\n<meta property=\"og:description\" content=\"Microsoft published CVE-2026-119990 on November 10: a CVSS 9.8 missing-auth bug in Azure OpenAI, already fully mitigated. No customer action is required.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-10T16:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/azure-openai-cve-2026-119990-missing-authentication-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"Azure OpenAI CVE-2026-119990: Microsoft Discloses a CVSS 9.8 Missing-Auth Flaw, Already Mitigated\",\"datePublished\":\"2026-11-10T16:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication\"},\"wordCount\":715,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/azure-openai-cve-2026-119990-missing-authentication-title.webp\",\"articleSection\":[\"AI Security\",\"Infrastructure\",\"Microsoft\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-10T16:00:00+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication\",\"name\":\"Azure OpenAI CVE-2026-119990: CVSS 9.8, Already Mitigated\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/azure-openai-cve-2026-119990-missing-authentication-title.webp\",\"datePublished\":\"2026-11-10T16:00:00+00:00\",\"description\":\"Microsoft published CVE-2026-119990 on November 10: a CVSS 9.8 missing-auth bug in Azure OpenAI, already fully mitigated. No customer action is required.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/azure-openai-cve-2026-119990-missing-authentication-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/azure-openai-cve-2026-119990-missing-authentication-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"A cloud operations room with rows of server racks and a monitor wall showing indistinct status lights, shot in cool muted light.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/azure-openai-cve-2026-119990-missing-authentication#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Azure OpenAI CVE-2026-119990: Microsoft Discloses a CVSS 9.8 Missing-Auth Flaw, Already Mitigated\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Azure OpenAI CVE-2026-119990: CVSS 9.8, Already Mitigated","description":"Microsoft published CVE-2026-119990 on November 10: a CVSS 9.8 missing-auth bug in Azure OpenAI, already fully mitigated. No customer action is required.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication","og_locale":"en_US","og_type":"article","og_title":"Azure OpenAI CVE-2026-119990: CVSS 9.8, Already Mitigated","og_description":"Microsoft published CVE-2026-119990 on November 10: a CVSS 9.8 missing-auth bug in Azure OpenAI, already fully mitigated. No customer action is required.","og_url":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication","og_site_name":"i10X News","article_published_time":"2026-11-10T16:00:00+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/azure-openai-cve-2026-119990-missing-authentication-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"Azure OpenAI CVE-2026-119990: Microsoft Discloses a CVSS 9.8 Missing-Auth Flaw, Already Mitigated","datePublished":"2026-11-10T16:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication"},"wordCount":715,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/azure-openai-cve-2026-119990-missing-authentication-title.webp","articleSection":["AI Security","Infrastructure","Microsoft","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-10T16:00:00+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication","url":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication","name":"Azure OpenAI CVE-2026-119990: CVSS 9.8, Already Mitigated","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/azure-openai-cve-2026-119990-missing-authentication-title.webp","datePublished":"2026-11-10T16:00:00+00:00","description":"Microsoft published CVE-2026-119990 on November 10: a CVSS 9.8 missing-auth bug in Azure OpenAI, already fully mitigated. No customer action is required.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/azure-openai-cve-2026-119990-missing-authentication-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/azure-openai-cve-2026-119990-missing-authentication-title.webp","width":1344,"height":768,"caption":"A cloud operations room with rows of server racks and a monitor wall showing indistinct status lights, shot in cool muted light."},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/azure-openai-cve-2026-119990-missing-authentication#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"Azure OpenAI CVE-2026-119990: Microsoft Discloses a CVSS 9.8 Missing-Auth Flaw, Already Mitigated"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7154","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=7154"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7154\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/7153"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=7154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=7154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=7154"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=7154"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=7154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}