CVE-2026-26118

CVE Enrichment

CVSS: 8.8 HIGH
EPSS: 1.06%
EPSS Percentile: 64.83%
CISA KEV: Not listed

Description

Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 11-Mar-2026 01:18
Last Modified: 17-Jun-2026 17:25
EPSS Date: 2026-11-08
CWE: CWE-918

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CNA Products / Version Status

Microsoft · Azure MCP Server Tools 1.0.0 (NuGet) Source: CNA · [email protected]
Default status: unknown

1.0.0 ≤ version < 1.0.2 — affected (custom)
Microsoft · Azure MCP Server Tools 1.0.0 (npm) Source: CNA · [email protected]
Default status: unknown

1.0.0 ≤ version < 1.0.2 — affected (custom)
Microsoft · Azure MCP Server Tools 2.0.0 (NuGet) Source: CNA · [email protected]
Default status: unknown

2.0.0-beta.1 ≤ version < 2.0.0-beta.17 — affected (custom)
Microsoft · Azure MCP Server Tools 2.0.0 (PyPi) Source: CNA · [email protected]
Default status: unknown

2.0.0-beta.1 ≤ version < 2.0.0-beta.17 — affected (custom)
Microsoft · Azure MCP Server Tools 2.0.0 (npm) Source: CNA · [email protected]
Default status: unknown

2.0.0-beta.1 ≤ version < 2.0.0-beta.17 — affected (custom)

Affected Products / Versions

microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:*:*:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta1:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta10:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta11:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta12:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta13:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta14:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta15:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta16:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta2:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta3:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta4:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta5:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta6:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta7:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta8:*:*:*:*:*:*
microsoft / azure_mcp_server Source: NVD CPE · affected
Version / affected range: 2.0.0
cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta9:*:*:*:*:*:*

References

[email protected]

Last enrichment sync: 09-Nov-2026 14:49
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (3)

XBOW, a Winlogon privilege escalation CVE-2026-25187 reported by James Forshaw, and an Azure MCP SSRF CVE-2026-26118 that can expose managed identity tokens, while Microsoft is enabling hotpatch updates via Windows Microsoft Patches 84 Vulnerabilities in May 2026 Update, Including Two Publicly Disclosed Zero-Days
Another issue, CVE-2026-26118, affects Azure MCP Server Tools. Microsoft’s March 2026 Patch Tuesday Fixes 79 Vulnerabilities, Including Two Disclosed Zero-Days
Another security defect that stands out is CVE-2026-26118, an elevation of privilege issue in Azure MCP Server Tools that could be exploited by sending specially crafted input to a server tool that accepts user-supplied Microsoft Patches 83 Vulnerabilities in March 2026 Update

CVE (12)

People (6)

MITRE ATT&CK (2)

Vendors (1)

Products (22)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.