What is the CVSS score of CVE-2026-26118?

CVE-2026-26118 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Azure Mcp Server are affected by CVE-2026-26118?

A high-severity vulnerability in Azure MCP Server could allow authorized users to elevate their privileges and access resources beyond their assigned permissions.. A patch is available.

How to fix or mitigate CVE-2026-26118?

Within 24 hours: Identify all systems running Azure MCP Server and assess which are internet-facing or accessible to untrusted networks. Within 7 days: Implement network segmentation to restrict access to Azure MCP Server endpoints and enforce strict authentication/authorization controls. Within 30 days: Monitor vendor communications for patch availability and develop a deployment plan; conduct privilege access reviews on affected systems to detect any unauthorized escalations.

Azure Mcp Server CVE-2026-26118

HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-03-10 secure@microsoft.com

GHSA-hhfx-wfvq-7g9c

SSRF Microsoft Azure Mcp Server

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:18 nvd

HIGH 8.8

DescriptionCVE.org

Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

AnalysisAI

Authenticated users can exploit a server-side request forgery vulnerability in Azure MCP Server to escalate their privileges across the network, potentially gaining unauthorized access to sensitive resources. The vulnerability affects Microsoft Azure environments and requires only low attack complexity with no user interaction, making it a significant risk for organizations using this service. No patch is currently available, leaving affected systems exposed to exploitation.

Technical ContextAI

Classified as CWE-918 (Server-Side Request Forgery (SSRF)). Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.