CVE-2026-108456
HighCVSS 7.7Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
Server-side request forgery (SSRF) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An attacker could force the service to make requests to internal resources, potentially leading to privilege escalation and access to protected data. This poses a risk of breaching the organization's network boundaries.
Recommendation
Apply available security updates for Azure AI Foundry and restrict the ability to make requests to internal resources. Monitor for unusual outbound requests from the service.
Other vulnerabilities in Azure AI Foundry
See all- CVE-2026-85889Critical
Missing authentication for a critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-32213Critical
Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-85917High
Server-side request forgery (SSRF) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS