Azure Devops Server

1 CVEs product

Monthly

CVE-2026-21512 MEDIUM This Month

Authenticated users of Azure and Azure DevOps Server can exploit a server-side request forgery vulnerability to perform network-based spoofing attacks. This MEDIUM severity issue (CVSS 6.5) requires valid credentials but allows attackers to manipulate the server into making unauthorized requests, potentially compromising confidentiality. No patch is currently available.

Azure SSRF Azure Devops Server
NVD
CVSS 3.1
6.5
EPSS
0.1%
CVE-2026-21512
EPSS 0% CVSS 6.5
MEDIUM This Month

Authenticated users of Azure and Azure DevOps Server can exploit a server-side request forgery vulnerability to perform network-based spoofing attacks. This MEDIUM severity issue (CVSS 6.5) requires valid credentials but allows attackers to manipulate the server into making unauthorized requests, potentially compromising confidentiality. No patch is currently available.

Azure SSRF Azure Devops Server
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy