Home / Vulnerability Intelligence / CVE-2026-32169

CVE-2026-32169 - Vulnerability Analysis

CriticalCVSS: 10.0

Last Updated: March 19, 2026

Azure Cloud Shell - Privilege Escalation

Published: March 19, 2026Updated: March 19, 2026Remote Exploitable

Overview

Azure Cloud Shell contains a server side request forgery caused by improper request validation, letting unauthorized attackers elevate privileges over a network, exploit requires network access.

Severity & Score

Severity: Critical

CVSS Score: 10.0

EPSS Score: 0.0%(Probability of exploitation in next 30 days)

Impact

Unauthorized attackers can elevate privileges over the network, potentially gaining unauthorized access or control.

Mitigation

Update to the latest version of Azure Cloud Shell.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32169

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Mar 19, 2026

🔴 CVE-2026-32169 - Critical (10) Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32169/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Mar 19, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-32169
Severity: Critical
CVSS Score: 10.0
Type: server_side_request_forgery
Status: new
EPSS: 0.0%
Social Posts: 2

CWE

CWE-918

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS Score

0.0%Probability of exploitation in the next 30 days