cvss-9.7

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple High-Severity Vulnerabilities Discovered in API and Identity Services Three critical vulnerabilities have been identified in various services, affecting users and systems. CVE-2025-11573 presents an infinite loop issue with a CVSS score of 7.5, while CVE-2025-59146 is a high-severity SSRF vulnerability with a CVSS score of 8.5. Additionally, CVE-2025-59218 is a critical privilege escalation flaw in Azure Entra ID, rated CVSS 9.6, allowing unauthenticated access. 3 sources 24