Unauthenticated POST to Application Gateway /accessv2 API from External IP

Ankit Mehta@Secvyn

•updated Jun 30, 2026•4•0•7

Detects unauthenticated POST requests directed at the '/accessv2' endpoint of an Azure Application Gateway originating from non-internal IP addresses. This behavior is associated with the exploitation of vulnerabilities like CVE-2026-8037.