LeakyCreds
NewInstant webhook alerts now available ā€” notified within seconds of any credential detection.Learn more ā†’
Home / Vulnerability Intelligence / CVE-2026-26138

CVE-2026-26138 - Vulnerability Analysis

HighCVSS: 8.6

Last Updated: March 19, 2026

Microsoft Purview - Privilege Escalation

Published: March 19, 2026Updated: March 19, 2026Remote Exploitable

Overview

Microsoft Purview contains a server side request forgery caused by improper request validation, letting unauthorized attackers elevate privileges over a network, exploit requires network access.

Severity & Score

Severity: High
CVSS Score: 8.6
EPSS Score: 0.0%(Probability of exploitation in next 30 days)

Impact

Unauthorized attackers can elevate privileges over the network, potentially gaining unauthorized access or control.

Mitigation

Update to the latest version of Microsoft Purview.

References

Social Media Activity(2 posts)

TheHackerWire
TheHackerWire
@thehackerwire
Mar 19, 2026

šŸŸ  CVE-2026-26138 - High (8.6) Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-26138/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Mar 19, 2026

šŸŸ  CVE-2026-26138 - High (8.6) Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-26138/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID
CVE-2026-26138
Severity
High
CVSS Score
8.6
Type
server_side_request_forgery
Status
new
EPSS
0.0%
Social Posts
2

CWE

  • CWE-918

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

EPSS Score

0.0%Probability of exploitation in the next 30 days