CVE Catalog
CVE-2026-33107
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk0.71%
50th percentile - higher than 50% of all known CVEs
Summary
Azure Databricks contains a Server-Side Request Forgery (SSRF) vulnerability that allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker can exploit SSRF to access internal network resources within the Azure Databricks environment, potentially leading to privilege escalation and data compromise.
Recommendation
Apply security updates provided by Microsoft for Azure Databricks and review network configurations to mitigate SSRF risks.
Original NVD description (English source)
Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.