CVE-2026-35425

High · 8.0

CVSS

8.0

EPSS

0.7%

Published

Jul 24, 2026

CISA due date

—

The record

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

Ecosystem	Package	Introduced	Fixed