CVE-2026-26118
Azure MCP Server Tools Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.
CVSS 3.1 · 8.8 High
EPSS 1.1%
KEV · Not listed
Vendors
Products