Vulnerability-Lookup

WID-SEC-W-2026-0963

Vulnerability from csaf_certbund - Published: 2026-04-06 22:00 - Updated: 2026-04-06 22:00

Summary

Microsoft Azure: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Azure ist eine Cloud Computing-Plattform von Microsoft.

Angriff: Ein Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Azure Komponenten und Diensten ausnutzen, um seine Privilegien zu erhöhen, und um Informationen offenzulegen.

Betroffene Betriebssysteme: - Linux - Sonstiges - UNIX - Windows

CVE-2026-26135

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SRE Agent Gateway-SignalR Hub Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent_gateway_-_signalr_hub`	SRE Agent Gateway-SignalR Hub
Microsoft Azure Custom Locations Resource Provider Microsoft / Azure	`cpe:/a:microsoft:azure:custom_locations_resource_provider`	Custom Locations Resource Provider
Microsoft Azure Web Apps Microsoft / Azure	`cpe:/a:microsoft:azure:web_apps`	Web Apps
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Kubernetes Service Microsoft / Azure	`cpe:/a:microsoft:azure:kubernetes_service`	Kubernetes Service
Microsoft Azure Databricks Microsoft / Azure	`cpe:/a:microsoft:azure:databricks`	Databricks

CVE-2026-32173

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SRE Agent Gateway-SignalR Hub Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent_gateway_-_signalr_hub`	SRE Agent Gateway-SignalR Hub
Microsoft Azure Custom Locations Resource Provider Microsoft / Azure	`cpe:/a:microsoft:azure:custom_locations_resource_provider`	Custom Locations Resource Provider
Microsoft Azure Web Apps Microsoft / Azure	`cpe:/a:microsoft:azure:web_apps`	Web Apps
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Kubernetes Service Microsoft / Azure	`cpe:/a:microsoft:azure:kubernetes_service`	Kubernetes Service
Microsoft Azure Databricks Microsoft / Azure	`cpe:/a:microsoft:azure:databricks`	Databricks

CVE-2026-32211

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SRE Agent Gateway-SignalR Hub Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent_gateway_-_signalr_hub`	SRE Agent Gateway-SignalR Hub
Microsoft Azure Custom Locations Resource Provider Microsoft / Azure	`cpe:/a:microsoft:azure:custom_locations_resource_provider`	Custom Locations Resource Provider
Microsoft Azure Web Apps Microsoft / Azure	`cpe:/a:microsoft:azure:web_apps`	Web Apps
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Kubernetes Service Microsoft / Azure	`cpe:/a:microsoft:azure:kubernetes_service`	Kubernetes Service
Microsoft Azure Databricks Microsoft / Azure	`cpe:/a:microsoft:azure:databricks`	Databricks

CVE-2026-32213

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SRE Agent Gateway-SignalR Hub Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent_gateway_-_signalr_hub`	SRE Agent Gateway-SignalR Hub
Microsoft Azure Custom Locations Resource Provider Microsoft / Azure	`cpe:/a:microsoft:azure:custom_locations_resource_provider`	Custom Locations Resource Provider
Microsoft Azure Web Apps Microsoft / Azure	`cpe:/a:microsoft:azure:web_apps`	Web Apps
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Kubernetes Service Microsoft / Azure	`cpe:/a:microsoft:azure:kubernetes_service`	Kubernetes Service
Microsoft Azure Databricks Microsoft / Azure	`cpe:/a:microsoft:azure:databricks`	Databricks

CVE-2026-33105

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SRE Agent Gateway-SignalR Hub Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent_gateway_-_signalr_hub`	SRE Agent Gateway-SignalR Hub
Microsoft Azure Custom Locations Resource Provider Microsoft / Azure	`cpe:/a:microsoft:azure:custom_locations_resource_provider`	Custom Locations Resource Provider
Microsoft Azure Web Apps Microsoft / Azure	`cpe:/a:microsoft:azure:web_apps`	Web Apps
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Kubernetes Service Microsoft / Azure	`cpe:/a:microsoft:azure:kubernetes_service`	Kubernetes Service
Microsoft Azure Databricks Microsoft / Azure	`cpe:/a:microsoft:azure:databricks`	Databricks

CVE-2026-33107

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SRE Agent Gateway-SignalR Hub Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent_gateway_-_signalr_hub`	SRE Agent Gateway-SignalR Hub
Microsoft Azure Custom Locations Resource Provider Microsoft / Azure	`cpe:/a:microsoft:azure:custom_locations_resource_provider`	Custom Locations Resource Provider
Microsoft Azure Web Apps Microsoft / Azure	`cpe:/a:microsoft:azure:web_apps`	Web Apps
Microsoft Azure AI Foundry Microsoft / Azure	`cpe:/a:microsoft:azure:ai_foundry`	AI Foundry
Microsoft Azure Kubernetes Service Microsoft / Azure	`cpe:/a:microsoft:azure:kubernetes_service`	Kubernetes Service
Microsoft Azure Databricks Microsoft / Azure	`cpe:/a:microsoft:azure:databricks`	Databricks

References

3 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://msrc.microsoft.com/update-guide/	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Azure ist eine Cloud Computing-Plattform von Microsoft.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Azure Komponenten und Diensten ausnutzen, um seine Privilegien zu erh\u00f6hen, und um Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0963 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0963.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0963 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0963"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates",
        "url": "https://msrc.microsoft.com/update-guide/"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft Azure: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-04-06T22:00:00.000+00:00",
      "generator": {
        "date": "2026-04-07T10:22:01.635+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-0963",
      "initial_release_date": "2026-04-06T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-04-06T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Kubernetes Service",
                "product": {
                  "name": "Microsoft Azure Kubernetes Service",
                  "product_id": "T052399",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:kubernetes_service"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Databricks",
                "product": {
                  "name": "Microsoft Azure Databricks",
                  "product_id": "T052400",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:databricks"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Web Apps",
                "product": {
                  "name": "Microsoft Azure Web Apps",
                  "product_id": "T052401",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:web_apps"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "AI Foundry",
                "product": {
                  "name": "Microsoft Azure AI Foundry",
                  "product_id": "T052402",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:ai_foundry"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "SRE Agent Gateway-SignalR Hub",
                "product": {
                  "name": "Microsoft Azure SRE Agent Gateway-SignalR Hub",
                  "product_id": "T052403",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:sre_agent_gateway_-_signalr_hub"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Custom Locations Resource Provider",
                "product": {
                  "name": "Microsoft Azure Custom Locations Resource Provider",
                  "product_id": "T052404",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:custom_locations_resource_provider"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Azure"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-26135",
      "product_status": {
        "known_affected": [
          "T052403",
          "T052404",
          "T052401",
          "T052402",
          "T052399",
          "T052400"
        ]
      },
      "release_date": "2026-04-06T22:00:00.000+00:00",
      "title": "CVE-2026-26135"
    },
    {
      "cve": "CVE-2026-32173",
      "product_status": {
        "known_affected": [
          "T052403",
          "T052404",
          "T052401",
          "T052402",
          "T052399",
          "T052400"
        ]
      },
      "release_date": "2026-04-06T22:00:00.000+00:00",
      "title": "CVE-2026-32173"
    },
    {
      "cve": "CVE-2026-32211",
      "product_status": {
        "known_affected": [
          "T052403",
          "T052404",
          "T052401",
          "T052402",
          "T052399",
          "T052400"
        ]
      },
      "release_date": "2026-04-06T22:00:00.000+00:00",
      "title": "CVE-2026-32211"
    },
    {
      "cve": "CVE-2026-32213",
      "product_status": {
        "known_affected": [
          "T052403",
          "T052404",
          "T052401",
          "T052402",
          "T052399",
          "T052400"
        ]
      },
      "release_date": "2026-04-06T22:00:00.000+00:00",
      "title": "CVE-2026-32213"
    },
    {
      "cve": "CVE-2026-33105",
      "product_status": {
        "known_affected": [
          "T052403",
          "T052404",
          "T052401",
          "T052402",
          "T052399",
          "T052400"
        ]
      },
      "release_date": "2026-04-06T22:00:00.000+00:00",
      "title": "CVE-2026-33105"
    },
    {
      "cve": "CVE-2026-33107",
      "product_status": {
        "known_affected": [
          "T052403",
          "T052404",
          "T052401",
          "T052402",
          "T052399",
          "T052400"
        ]
      },
      "release_date": "2026-04-06T22:00:00.000+00:00",
      "title": "CVE-2026-33107"
    }
  ]
}

CVE-2026-26135 (GCVE-0-2026-26135)

Vulnerability from cvelistv5 – Published: 2026-04-02 23:26 – Updated: 2026-06-19 16:09 Exclusively Hosted Service

Title

Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability

Summary

Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Custom Locations Resource Provider	Affected: -

Date Public

2026-04-02 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-26135",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-03T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-04T03:55:36.366Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Custom Locations Resource Provider",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_custom_locations_resource_provider:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-04-02T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-19T16:09:04.247Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26135"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-26135",
    "datePublished": "2026-04-02T23:26:58.697Z",
    "dateReserved": "2026-02-11T16:24:51.133Z",
    "dateUpdated": "2026-06-19T16:09:04.247Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32173 (GCVE-0-2026-32173)

Vulnerability from cvelistv5 – Published: 2026-04-02 23:27 – Updated: 2026-06-19 16:09 Exclusively Hosted Service

Title

Azure SRE Agent Information Disclosure Vulnerability

Summary

Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-287 - Improper Authentication

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure SRE Agent Gateway - SignalR Hub	Affected: -

Date Public

2026-04-02 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-32173",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-03T13:43:51.736869Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-03T13:56:03.727Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure SRE Agent Gateway - SignalR Hub",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_sre_agent_gateway_signalR_hub:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-04-02T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-19T16:09:00.564Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure SRE Agent Information Disclosure Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32173"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure SRE Agent Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-32173",
    "datePublished": "2026-04-02T23:27:00.374Z",
    "dateReserved": "2026-03-10T23:09:43.266Z",
    "dateUpdated": "2026-06-19T16:09:00.564Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32211 (GCVE-0-2026-32211)

Vulnerability from cvelistv5 – Published: 2026-04-02 23:27 – Updated: 2026-06-19 16:09 Exclusively Hosted Service

Title

Azure MCP Server Information Disclosure Vulnerability

Summary

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Web Apps	Affected: -

Date Public

2026-04-02 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-32211",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-03T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-04T03:55:20.716Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Web Apps",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_web_apps:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-04-02T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306: Missing Authentication for Critical Function",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-19T16:09:04.809Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure MCP Server Information Disclosure Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32211"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure MCP Server Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-32211",
    "datePublished": "2026-04-02T23:27:01.785Z",
    "dateReserved": "2026-03-11T01:49:58.659Z",
    "dateUpdated": "2026-06-19T16:09:04.809Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32213 (GCVE-0-2026-32213)

Vulnerability from cvelistv5 – Published: 2026-04-02 23:26 – Updated: 2026-06-19 16:09 Exclusively Hosted Service

Title

Azure AI Foundry Elevation of Privilege Vulnerability

Summary

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Severity

10 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-285 - Improper Authorization

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure AI Foundry	Affected: -

Date Public

2026-04-02 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-32213",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-03T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-04T03:55:33.903Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure AI Foundry",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_ai_foundry:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-04-02T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "CWE-285: Improper Authorization",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-19T16:09:05.462Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure AI Foundry Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32213"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure AI Foundry Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-32213",
    "datePublished": "2026-04-02T23:26:56.002Z",
    "dateReserved": "2026-03-11T01:49:58.659Z",
    "dateUpdated": "2026-06-19T16:09:05.462Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33105 (GCVE-0-2026-33105)

Vulnerability from cvelistv5 – Published: 2026-04-02 23:26 – Updated: 2026-06-19 16:09 Exclusively Hosted Service

Title

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Summary

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

Severity

10 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-285 - Improper Authorization

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Kubernetes Service	Affected: -

Date Public

2026-04-02 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-33105",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-03T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-04T03:55:23.192Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Kubernetes Service",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_kubernetes_service:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-04-02T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "CWE-285: Improper Authorization",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-19T16:09:06.074Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33105"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-33105",
    "datePublished": "2026-04-02T23:26:59.400Z",
    "dateReserved": "2026-03-17T20:15:23.719Z",
    "dateUpdated": "2026-06-19T16:09:06.074Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33107 (GCVE-0-2026-33107)

Vulnerability from cvelistv5 – Published: 2026-04-02 23:26 – Updated: 2026-06-19 16:08 Exclusively Hosted Service

Title

Azure Databricks Elevation of Privilege Vulnerability

Summary

Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.

Severity

10 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Databricks	Affected: -

Date Public

2026-04-02 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-33107",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-03T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-04T03:55:35.062Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Databricks",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_databricks:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-04-02T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-19T16:08:13.776Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Databricks Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33107"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure Databricks Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-33107",
    "datePublished": "2026-04-02T23:26:57.956Z",
    "dateReserved": "2026-03-17T20:15:23.720Z",
    "dateUpdated": "2026-06-19T16:08:13.776Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2026-0963

CVE-2026-26135 (GCVE-0-2026-26135)

CVE-2026-32173 (GCVE-0-2026-32173)

CVE-2026-32211 (GCVE-0-2026-32211)

CVE-2026-32213 (GCVE-0-2026-32213)

CVE-2026-33105 (GCVE-0-2026-33105)

CVE-2026-33107 (GCVE-0-2026-33107)

Tags

Sightings

Nomenclature