CVE Catalog
CVE-2026-32211
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk0.83%
54th percentile - higher than 54% of all known CVEs
Summary
Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.
Risk Assessment
An unauthenticated attacker can access sensitive information, potentially leading to data confidentiality breaches and further attacks.
Recommendation
Apply the security patches provided by Microsoft for Azure MCP Server and implement authentication for critical functions.
Original NVD description (English source)
Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.