CVE-2026-26118

Publication date

2026-03-10 17:05:21

Family

microsoft

State

PUBLISHED

Description

Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.