CVE-2026-26135 - Vulnerability Analysis

Overview

Azure Custom Locations Resource Provider contains a server side request forgery caused by improper request handling, letting authorized attackers elevate privileges over a network, exploit requires attacker authorization.

Severity & Score

Impact

Authorized attackers can elevate privileges over the network, potentially compromising network security.

Mitigation

Update to the latest version with the fix applied.

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26135

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner