CVE-2026-26118

CVE-2026-26118 – Azure MCP Server Tools SSRF allows an authorized attacker to elevate privileges. Affected component: MCP Server Tools. Root cause: server-side request forgery enabling elevation of privilege with network access. CVSSv3.1 base score 8.8 (High); Vector: Network; Privileges required...