{"ok":true,"trend":{"id":1556576,"platform":"mastodon","region":"global","key":"microsoft october bundle — cvss 10.0 cert bypass in partner center, 9.9 authz bypass in bookings, two unauth rces at 9.8","title":"Microsoft October bundle — CVSS 10.0 cert bypass in Partner Center, 9.9 authz bypass in Bookings, two unauth RCEs at 9.8","url":"https://infosec.exchange/@threataft/117408473709832259","first_seen":"2026-10-09T02:33:18.149982Z","last_seen":"2026-10-09T02:33:18.149982Z","last_rank":12,"peak_rank":12,"last_volume":2,"peak_volume":2,"seen_count":1,"score":0.76203125,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"Microsoft's October patch bundle addresses a string of critical flaws in its hosted services: a CVSS 10.0 certificate bypass in Partner Center, a 9.9 authorization bypass in Bookings, two unauthenticated remote code execution vulnerabilities rated 9.8 in Azure App Service and Dataverse, and a 9.6 privilege escalation in Azure SRE Agent. Microsoft patches the backend automatically, but security practitioners urge tenants to verify their configurations.","why":"The exceptional severity ratings and the fact that many flaws affect managed cloud services where customers cannot patch directly are drawing attention from the security community.","tone":"neutral","entities":["Microsoft","Azure App Service","Dataverse","Partner Center","Microsoft Bookings"],"summarized_at":"2026-10-09T02:36:11.286229Z","meta":{"tag":"infosec","via":"scan","kind":"status","lang":"en","instance":"mastodon.social","tag_uses":1096},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"Microsoft fixes severe cloud flaws in October security bundle","section_name":"Technology","category_name":"Cybersecurity","timeline":[{"captured_at":"2026-10-09T02:33:18.149982Z","rank":12,"volume":2}],"posts":[{"platform":"mastodon","url":"https://infosec.exchange/@threataft/117408473709832259","author":"threataft@infosec.exchange","title":null,"snippet":"Microsoft October bundle — CVSS 10.0 cert bypass in Partner Center, 9.9 authz bypass in Bookings, two unauth RCEs at 9.8 in Azure App Service and Dataverse, 9.6 privesc in Azure SRE Agent. All hosted services. Microsoft patches the backend. Verify your tenant configs and…","posted_at":"2026-10-09T01:58:54Z","likes":2}],"elsewhere":[],"window":"7d"}}