Azure Ai Foundry (Microsoft) - vulnerabilities (CVEs)

5 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-22. Vendor: Microsoft.

CVEs of Azure Ai Foundry

• CVE-2026-108456 - CVSS 7.7 (high), 2026-10-22: Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
• CVE-2026-85917 - CVSS 7.5 (high), 2026-09-17: Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-85889 - CVSS 10 (critical), 2026-09-17: Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-35435 - CVSS 10 (critical), 2026-05-07: Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-32213 - CVSS 10 (critical), 2026-04-03: Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.