CVE-2025-66390 | Microsoft Azure API Management prior 2025-10-17 API endpoint access control

July 21, 2026 Yanac

A vulnerability classified as critical has been found in Microsoft Azure API Management. Affected by this vulnerability is an unknown functionality of the component API endpoint. The manipulation leads to improper access controls.

This vulnerability is uniquely identified as CVE-2025-66390. The attack is possible to be carried out remotely. No exploit exists.

The real existence of this vulnerability is still doubted at the moment.VulDB Recent EntriesRead More