Multiple High-Severity Vulnerabilities Discovered in API and Identity Services

Multiple High-Severity Vulnerabilities Discovered in API and Identity Services

First seen 4 Feb 2026, 17:06 UTC •Ctrlaltnod •23.9

Article Content

Browse articles
ThreatCluster

Three critical vulnerabilities have been identified in various services, affecting users and systems. CVE-2025-11573 presents an infinite loop issue with a CVSS score of 7.5, while CVE-2025-59146 is a high-severity SSRF vulnerability with a CVSS score of 8.5. Additionally, CVE-2025-59218 is a critical privilege escalation flaw in Azure Entra ID, rated CVSS 9.6, allowing unauthenticated access.

How this analysis works

Extracted Entities

1 / 2