Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Azure IoT Explorer Sends Sensitive Data Unencrypted Over the Internet
CVE-2026-23661
Summary
If you use Azure IoT Explorer, an attacker could intercept sensitive data transmitted between your devices and the Azure service. This is a concern because sensitive data, like device credentials and configuration settings, could be accessed by an unauthorized party. To protect your data, update your Azure IoT Explorer to the latest version.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| microsoft | azure_iot_explorer | <= 0.15.13 | – |
Original title
Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.
Original description
Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.
nvd CVSS3.1
7.5
Vulnerability type
CWE-319
Cleartext Transmission of Sensitive Information
Published: 10 Mar 2026 · Updated: 14 Mar 2026 · First seen: 11 Mar 2026