Microsoft MSRC Allegedly Dismissed Dependency Confusion Vulnerability, Claims Researcher

A dependency confusion vulnerability affecting Microsoft’s Azure Portal after the Microsoft Security Response Center (MSRC) closed the case, claiming the confirmed remote code execution evidence did not constitute an exploitable security issue. The vulnerability was uncovered by Security researcher Wahid Fayad in January 2026 during a routine analysis of JavaScript assets served on portal.azure.com. While […] The post Microsoft MSRC Allegedly Dismissed Dependency Confusion Vulnerability, Claims Researcher appeared first on Cyber Security News.