Description
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges.
Below is a complete list of vulnerabilities:
- An information disclosure vulnerability in Azure MCP Server can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Azure AI Foundry can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Microsoft Azure Kubernetes Service can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Azure Custom Locations Resource Provider (RP) can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Azure SRE Agent can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Azure Databricks can be exploited remotely to gain privileges.
Original advisories
Exploitation
Related products
CVE list
- CVE-2026-26135 critical
- CVE-2026-32173 critical
- CVE-2026-32211 critical
- CVE-2026-32213 critical
- CVE-2026-33105 critical
- CVE-2026-33107 critical
KB list
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!