Azure Devops (Microsoft) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-05-07. Vendor: Microsoft.

CVEs of Azure Devops

• CVE-2026-42826 - CVSS 10 (critical), 2026-05-07: Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network.
• CVE-2026-23658 - CVSS 9.8 (critical), 2026-03-19: Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.
• CVE-2025-47158 - CVSS 9 (critical), 2025-07-18: Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.
• CVE-2025-29813 - CVSS 10 (critical), 2025-05-08: Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.