# Azure-Access vulnerabilities Source: https://junglewise.ai/threats/vendors/azure-access Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/azure-access.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 37 vulnerabilities in Azure-Access: 0 in the last 7 days and 0 in the last 90 days, 23 of them critical and 0 exploited in the wild. The most recent, CVE-2025-12603, was published on 1 November 2025. 4 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 37 (23 critical, 0 exploited in the wild) ## Latest Azure-Access vulnerabilities - [CVE-2025-12603: /etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12603-etc-timezone-can-be-arbitrarily-written-this-issue-affects-blu) (critical, CVSS 9.8, published 1 Nov 2025) - [CVE-2025-12602: /etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through…](https://junglewise.ai/threats/cve-2025-12602-etc-avahi-services-z9-service-can-be-arbitrarily-written-this) (critical, CVSS 9.8, published 1 Nov 2025) - [CVE-2025-12601: Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12601-denial-of-service-due-to-slowloris-this-issue-affects-blu-ic2) (high, CVSS 7.5, published 1 Nov 2025) - [CVE-2025-12600: Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through…](https://junglewise.ai/threats/cve-2025-12600-web-ui-malfunction-when-setting-unexpected-locale-via-api-this) (critical, CVSS 9.8, published 1 Nov 2025) - [CVE-2025-12599: Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5…](https://junglewise.ai/threats/cve-2025-12599-multiple-devices-are-sharing-the-same-secrets-for-sdksocket-tcp) (critical, CVSS 9.8, published 1 Nov 2025) - [CVE-2025-12554: Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12554-missing-security-headers-this-issue-affects-blu-ic2-through-1-19) (critical, CVSS 9.8, published 31 Oct 2025) - [CVE-2025-12553: Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12553-email-server-certificate-verification-disabled-this-issue-affects) (critical, CVSS 9.8, published 31 Oct 2025) - [CVE-2025-12552: Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12552-insufficient-password-policy-this-issue-affects-blu-ic2-through-1) (critical, CVSS 9.8, published 31 Oct 2025) - [CVE-2025-12517: Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through…](https://junglewise.ai/threats/cve-2025-12517-credits-page-not-matching-versions-in-use-in-the-firmwarethis) (medium, CVSS 5.3, published 30 Oct 2025) - [CVE-2025-12516: Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .](https://junglewise.ai/threats/cve-2025-12516-lack-of-graceful-error-handling-http-5xx-errorthis-issue-affects) (critical, CVSS 9.8, published 30 Oct 2025) - [CVE-2025-12515: Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .](https://junglewise.ai/threats/cve-2025-12515-systemic-internal-server-errors-http-500-responsethis-issue) (critical, CVSS 9.8, published 30 Oct 2025) - [CVE-2025-12479: Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5…](https://junglewise.ai/threats/cve-2025-12479-systemic-lack-of-cross-site-request-forgery-csrf-token) (high, CVSS 8.8, published 29 Oct 2025) - [CVE-2025-12478: Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .](https://junglewise.ai/threats/cve-2025-12478-non-compliant-tls-configuration-this-issue-affects-blu-ic2) (critical, CVSS 9.8, published 29 Oct 2025) - [CVE-2025-12477: Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .](https://junglewise.ai/threats/cve-2025-12477-server-version-disclosure-this-issue-affects-blu-ic2-through-1-19) (critical, CVSS 9.8, published 29 Oct 2025) - [CVE-2025-12476: Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .](https://junglewise.ai/threats/cve-2025-12476-resource-lacking-authn-this-issue-affects-blu-ic2-through-1-19-5) (critical, CVSS 9.8, published 29 Oct 2025) - [CVE-2025-12425: Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .](https://junglewise.ai/threats/cve-2025-12425-local-privilege-escalation-this-issue-affects-blu-ic2-through-1) (high, CVSS 7.8, published 28 Oct 2025) - [CVE-2025-12424: Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .](https://junglewise.ai/threats/cve-2025-12424-privilege-escalation-through-suid-bit-binary-this-issue-affects) (critical, CVSS 9.8, published 28 Oct 2025) - [CVE-2025-12423: Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .](https://junglewise.ai/threats/cve-2025-12423-protocol-manipulation-might-lead-to-denial-of-service-this-issue) (high, CVSS 7.5, published 28 Oct 2025) - [CVE-2025-12422: Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue…](https://junglewise.ai/threats/cve-2025-12422-vulnerable-upgrade-feature-arbitrary-file-write-may-lead-to) (critical, CVSS 9.8, published 28 Oct 2025) - [CVE-2025-12365: Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12365-error-messages-wrapped-in-http-header-this-issue-affects-blu-ic2) (medium, CVSS 5.3, published 27 Oct 2025) - [CVE-2025-12364: Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12364-weak-password-policy-this-issue-affects-blu-ic2-through-1-19-5) (critical, CVSS 9.8, published 27 Oct 2025) - [CVE-2025-12363: Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12363-email-password-disclosure-this-issue-affects-blu-ic2-through-1-19) (high, CVSS 7.5, published 27 Oct 2025) - [CVE-2025-12285: Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12285-missing-initial-password-change-this-issue-affects-blu-ic2) (critical, CVSS 9.8, published 26 Oct 2025) - [CVE-2025-12284: Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through…](https://junglewise.ai/threats/cve-2025-12284-lack-of-input-validation-in-the-web-ui-might-lead-to-potential) (medium, CVSS 6.1, published 26 Oct 2025) - [CVE-2025-12278: Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12278-logout-functionality-not-working-this-issue-affects-blu-ic2) (medium, CVSS 6.5, published 26 Oct 2025) ## Most severe Azure-Access vulnerabilities - [CVE-2025-12275: Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through…](https://junglewise.ai/threats/cve-2025-12275-mail-configuration-file-manipulation-command-execution-this-issue) (critical, CVSS 9.8, published 26 Oct 2025) - [CVE-2025-12422: Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue…](https://junglewise.ai/threats/cve-2025-12422-vulnerable-upgrade-feature-arbitrary-file-write-may-lead-to) (critical, CVSS 9.8, published 28 Oct 2025) - [CVE-2025-12599: Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5…](https://junglewise.ai/threats/cve-2025-12599-multiple-devices-are-sharing-the-same-secrets-for-sdksocket-tcp) (critical, CVSS 9.8, published 1 Nov 2025) - [CVE-2025-12104: Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through…](https://junglewise.ai/threats/cve-2025-12104-outdated-and-vulnerable-ui-dependencies-might-potentially-lead-to) (critical, CVSS 9.8, published 23 Oct 2025) - [CVE-2025-12600: Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through…](https://junglewise.ai/threats/cve-2025-12600-web-ui-malfunction-when-setting-unexpected-locale-via-api-this) (critical, CVSS 9.8, published 1 Nov 2025) - [CVE-2025-12554: Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12554-missing-security-headers-this-issue-affects-blu-ic2-through-1-19) (critical, CVSS 9.8, published 31 Oct 2025) - [CVE-2025-12516: Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .](https://junglewise.ai/threats/cve-2025-12516-lack-of-graceful-error-handling-http-5xx-errorthis-issue-affects) (critical, CVSS 9.8, published 30 Oct 2025) - [CVE-2025-12515: Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .](https://junglewise.ai/threats/cve-2025-12515-systemic-internal-server-errors-http-500-responsethis-issue) (critical, CVSS 9.8, published 30 Oct 2025) - [CVE-2025-12220: Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12220-busybox-1-31-1-multiple-known-vulnerabilities-this-issue-affects) (critical, CVSS 9.8, published 25 Oct 2025) - [CVE-2025-12219: Vulnerable Components in Azure Access OS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.](https://junglewise.ai/threats/cve-2025-12219-vulnerable-components-in-azure-access-os-this-issue-affects-blu) (critical, CVSS 9.8, published 25 Oct 2025) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Azure-Access technologies - [Azure-Access Blu-Ic2](https://junglewise.ai/threats/technologies/blu-ic2): 37 vulnerabilities - [Azure-Access Blu-Ic2 Firmware](https://junglewise.ai/threats/technologies/blu-ic2-firmware): 37 vulnerabilities - [Azure-Access Blu-Ic4](https://junglewise.ai/threats/technologies/blu-ic4): 37 vulnerabilities - [Azure-Access Blu-Ic4 Firmware](https://junglewise.ai/threats/technologies/blu-ic4-firmware): 37 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Azure-Access vulnerabilities", https://junglewise.ai/threats/vendors/azure-access, 9 November 2026.