CVE-2026-26135
Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.
CVSS 3.1 · 9.6 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products