<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-02T10:52:11.995217+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-26118</id>
    <title>CVE-2026-26118 — Azure MCP Server Tools Elevation of Privilege Vulnerability</title>
    <updated>2026-10-02T10:52:11.997159+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Microsoft Azure MCP Server Tools 1.0.0 (npm), Microsoft Azure MCP Server Tools 1.0.0 (NuGet), Microsoft Azure MCP Server Tools 2.0.0 (npm), Microsoft Azure MCP Server Tools 2.0.0 (NuGet), Microsoft Azure MCP Server Tools 2.0.0 (PyPi)</p>
<p>Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-26118"/>
  </entry>
</feed>
