PULSE
LIVE53signals / 24h
FEED
ransomnova reclama a Digital Edge · SG · Technologyransomincransom reclama a autismuslink.ch · CH · Healthcareransomplay reclama a Record Go Alquiler · ES · Hospitalityransomplay reclama a Restaurant Depot · US · Retail & E-Commerceransomplay reclama a The DeBruler · US · Not Foundransomincransom reclama a cabincreekhealth.com · US · Healthcareransomcmdorganization reclama a T Simon Jewelers · US · Retail & E-Commerceransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Otherransomnova reclama a Digital Edge · SG · Technologyransomincransom reclama a autismuslink.ch · CH · Healthcareransomplay reclama a Record Go Alquiler · ES · Hospitalityransomplay reclama a Restaurant Depot · US · Retail & E-Commerceransomplay reclama a The DeBruler · US · Not Foundransomincransom reclama a cabincreekhealth.com · US · Healthcareransomcmdorganization reclama a T Simon Jewelers · US · Retail & E-Commerceransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Other
← All CVEs
CVE WatchJul 23, 2026

CVE-2026-15630

A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exp

CVSS

No CVSS

EPSS

KEV

Exploit Today

0-100

Published: Jul 23, 2026 · Last modified: Jul 23, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization (based on ?id=) and action (based on request body).

Official references
Related CVEs

No related CVEs by CWE or product.