CVE-2026-33833
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
Improper neutralization of special elements in output used by a downstream component in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.
Risk Assessment
An attacker could exploit this vulnerability to spoof other devices on the network, potentially leading to serious security breaches.
Recommendation
It is recommended to update Azure Machine Learning components and implement additional security measures to mitigate the risk.
Other vulnerabilities in Azure Machine Learning
See all- CVE-2026-32207High
Azure Machine Learning has an improper neutralization of input during web page generation, leading to a cross-site scripting (XSS) vulnerability. This allows an unauthorized attacker to perform spoofing over a network.
- CVE-2023-23382Medium
An information disclosure vulnerability in Azure Machine Learning Compute Instance. An attacker could exploit this to gain unauthorized access to data.
Original NVD description (English source)
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.