CVE-2026-41105

HighCVSS 8.1

Published: 07/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.83%

57th percentile - higher than 57% of all known CVEs

Summary

A server-side request forgery (SSRF) vulnerability in Azure Notification Service allows an authorized attacker to elevate privileges over a network.

Risk Assessment

An attacker with appropriate permissions can exploit this vulnerability to gain access to network resources, potentially leading to serious security breaches.

Recommendation

It is recommended to monitor and restrict access to the Azure Notification Service and to regularly update systems to minimize risk.

Other vulnerabilities in Azure Notification Service

CVE-2025-59500High
Azure Notification Service has an improper access control vulnerability that allows an authorized attacker to elevate privileges over a network.

Original NVD description (English source)

Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS