Microsoft Azure Iot Explorer — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure Iot Explorer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2026-23661 — CVSS 7.5 (high): Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a…
• CVE-2026-23662 — CVSS 7.5 (high): Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.
• CVE-2026-23664 — CVSS 7.5 (high): Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose…
• CVE-2026-26121 — CVSS 7.5 (high): Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.
• CVE-2026-21528 — CVSS 6.5 (medium): Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.