<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 10:52:17 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-26118 — Azure MCP Server Tools Elevation of Privilege Vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-26118</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft Azure MCP Server Tools 1.0.0 (npm), Microsoft Azure MCP Server Tools 1.0.0 (NuGet), Microsoft Azure MCP Server Tools 2.0.0 (npm), Microsoft Azure MCP Server Tools 2.0.0 (NuGet), Microsoft Azure MCP Server Tools 2.0.0 (PyPi)&lt;/p&gt;
&lt;p&gt;Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft Azure MCP Server Tools 1.0.0 (npm), Microsoft Azure MCP Server Tools 1.0.0 (NuGet), Microsoft Azure MCP Server Tools 2.0.0 (npm), Microsoft Azure MCP Server Tools 2.0.0 (NuGet), Microsoft Azure MCP Server Tools 2.0.0 (PyPi)&lt;/p&gt;
&lt;p&gt;Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-26118</guid>
    </item>
  </channel>
</rss>
