16168 matches found
EUVD-2026-18556
Server-side request forgery ssrf in Azure Custom Locations Resource Provider RP allows an authorized attacker to elevate privileges over a network...
EUVD-2026-18561
Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-33107
Server-side request forgery ssrf in Azure Databricks allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-33105
Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-26135
Server-side request forgery ssrf in Azure Custom Locations Resource Provider RP allows an authorized attacker to elevate privileges over a network...
CVE-2026-32173
Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network...
CVE-2026-32211
Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...
CVE-2026-32213
Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-33416)
The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33416 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG...
CVE-2026-32211
Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...
CVE-2026-32211 Azure MCP Server Information Disclosure Vulnerability
...
CVE-2026-32211
CVE-2026-32211 describes a missing-authentication vulnerability in Azure MCP Server that allows an unauthorized network attacker to disclose information. The NVD entries corroborate a critical impact (CVSS v3.1: 9.1) with high confidentiality and integrity impact, and network attack vector with n...
CVE-2026-32211 Azure MCP Server Information Disclosure Vulnerability
...
CVE-2026-32173
Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network...
CVE-2026-32173
Azure SRE Agent vulnerability CVE-2026-32173 involves improper authentication that could let an unauthenticated attacker disclose information over a network. Affected component is the Azure SRE Agent; the underlying issue is authentication checks failing, enabling information disclosure with netw...
CVE-2026-32173 Azure SRE Agent Information Disclosure Vulnerability
...
CVE-2026-32173 Azure SRE Agent Information Disclosure Vulnerability
...
CVE-2026-33105
CVE-2026-33105 affects Microsoft Azure Kubernetes Service. The vulnerability is described as improper authorization that could allow an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 vector indicates network access, low attack complexity, no user interaction, and a CRITI...