CVE-2025-53793: Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.

PriorityP351high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

1.31%

67.4th percentile

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
microsoft	azure_stack_hub	>= 1.2406.0.8 < 1.2406.1.23	1.2406.1.23
microsoft	azure_stack_hub	>= 1.2408.0.19 < 1.2408.1.50	1.2408.1.50
microsoft	azure_stack_hub	>= 1.2501.0.21 < 1.2501.1.47	1.2501.1.47
microsoft	azure_stack_hub_2406	>= 1.0.0 < 1.2406.1.23	1.2406.1.23
microsoft	azure_stack_hub_2408	>= 1.0.0 < 1.2408.1.50	1.2408.1.50
microsoft	azure_stack_hub_2501	>= 1.0.0 < 1.2501.1.47	1.2501.1.47
msrc	azure_stack_hub_2406	—	—
msrc	azure_stack_hub_2408	—	—
msrc	azure_stack_hub_2501	—	—

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vendor_msrc7.5HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.