🔴 CVE-2026-26135 - Critical (9.6)
Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-26135/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
🔴 CVE-2026-33107 - Critical (10)
Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33107/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
🔴 CVE-2026-33105 - Critical (10)
Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33105/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
🚨 EUVD-2026-18561
📊 Score: 10.0/10 (CVSS v3.1)
📦 Product: Azure AI Foundry
🏢 Vendor: Microsoft
📅 Updated: 2026-04-02
📝 Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-18561
🚨 EUVD-2026-18564
📊 Score: 10.0/10 (CVSS v3.1)
📦 Product: Azure Databricks
🏢 Vendor: Microsoft
📅 Updated: 2026-04-02
📝 Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-18564
🚨 EUVD-2026-18556
📊 Score: 9.6/10 (CVSS v3.1)
📦 Product: Azure Custom Locations Resource Provider
🏢 Vendor: Microsoft
📅 Updated: 2026-04-02
📝 Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-18556
🚨 EUVD-2026-18562
📊 Score: 10.0/10 (CVSS v3.1)
📦 Product: Azure Kubernetes Service
🏢 Vendor: Microsoft
📅 Updated: 2026-04-02
📝 Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-18562
🚨 EUVD-2026-18558
📊 Score: 8.6/10 (CVSS v3.1)
📦 Product: Azure SRE Agent Gateway - SignalR Hub
🏢 Vendor: Microsoft
📅 Updated: 2026-04-02
📝 Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-18558
🚨 EUVD-2026-18560
📊 Score: 9.1/10 (CVSS v3.1)
📦 Product: Azure Web Apps
🏢 Vendor: Microsoft
📅 Updated: 2026-04-02
📝 Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-18560
TheHackerWire
EUVD Bot
Shodan Safari