What is the CVSS score of CVE-2026-57106?

CVE-2026-57106 has a CVSS 3.1 base score of 10.0 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.9%.

Is there a patch available for CVE-2026-57106?

Yes, a patch is available for CVE-2026-57106. Update the affected software to the latest version immediately.

Microsoft Purview Data Governance CVE-2026-57106

EUVD-2026-48601 CRITICAL

Server-Side Request Forgery (SSRF) (CWE-918)

2026-07-24 microsoft

GHSA-vjxh-3whp-2fjm

SSRF Microsoft Microsoft Purview Data Governance

10.0

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

10.0 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 11:46 vuln.today

CVE Published

Jul 24, 2026 - 14:36 cve.org

CRITICAL 10.0

DescriptionCVE.org

Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network.

AnalysisAI

Server-side request forgery in Microsoft Purview Data Governance allows an unauthenticated remote attacker to elevate privileges across the network, with potential for full compromise. The vulnerability is rated CVSS 10.0 critical, but EPSS (0.92%) and SSVC indicate no known exploitation, suggesting low immediate risk despite high severity. A vendor patch is available.