Microsoft Purview Data Governance

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-57106 Jul 24, 14:36 CRITICAL PATCH HOSTED Monitor

Server-side request forgery in Microsoft Purview Data Governance allows an unauthenticated remote attacker to elevate privileges across the network, with potential for full compromise. The vulnerability is rated CVSS 10.0 critical, but EPSS (0.92%) and SSVC indicate no known exploitation, suggesting low immediate risk despite high severity. A vendor patch is available.

SSRF Microsoft Microsoft Purview Data Governance

NVD VulDB

CVSS 3.1

10.0

EPSS

0.9%

CVE-2026-57106

EPSS 1% CVSS 10.0

CRITICAL PATCH HOSTED Monitor

Server-side request forgery in Microsoft Purview Data Governance allows an unauthenticated remote attacker to elevate privileges across the network, with potential for full compromise. The vulnerability is rated CVSS 10.0 critical, but EPSS (0.92%) and SSVC indicate no known exploitation, suggesting low immediate risk despite high severity. A vendor patch is available.

SSRF Microsoft Microsoft Purview Data Governance

NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy