CVE-2025-59503

CriticalCVSS 10.0

Published: 23/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.77%

54th percentile - higher than 54% of all known CVEs

Summary

A server-side request forgery (SSRF) vulnerability in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network.

Risk Assessment

An unauthenticated attacker with network access could exploit SSRF to elevate privileges in the Azure Compute Gallery environment. This may lead to unauthorized access to cloud resources and operations.

Recommendation

Apply available security updates for Azure Compute Gallery and restrict network access to the service following the principle of least privilege.

Other vulnerabilities in Azure Compute Gallery

CVE-2026-26147High
Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.

Original NVD description (English source)

Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS