CVE-2026-26138 Microsoft Purview Elevation of Privilege Vulnerability

...

CVE-2026-26138

CVE-2026-26138 describes a server-side request forgery (SSRF) in Microsoft Purview that enables an attacker to achieve a network-based privilege elevation. The connected sources confirm the vulnerable product (Microsoft Purview) and the impact (privilege escalation) via SSRF, but do not provide g...