16188 matches found
GHSA-HHFX-WFVQ-7G9C Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network
Server-Side Request Forgery SSRF in Azure MCP Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-10688
Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...
EUVD-2026-10687
Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...
EUVD-2026-10689
Server-side request forgery ssrf in Azure MCP Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-10700
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...
EUVD-2026-10702
External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...
Server-side Request Forgery (SSRF)
Overview Azure.Mcp is an All Azure MCP tools in a single server. The Azure MCP Server implements the MCP specification to create a seamless connection between AI agents and Azure services. Azure MCP Server can be used alone or with the GitHub Copilot for Azure extension in VS Code. Affected...
EUVD-2026-10585
Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
EUVD-2026-10582
Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...
EUVD-2026-10583
Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
EUVD-2026-10584
Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
EUVD-2026-10586
Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally...
EUVD-2026-10581
Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...
CVE-2026-26148
External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...
CVE-2026-26148
External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...
CVE-2026-26141
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...
CVE-2026-26141
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...
CVE-2026-26117
Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...