CVE Catalog

CVE-2026-66800

HighCVSS 8.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.55%

44th percentile - higher than 44% of all known CVEs

Summary

Server-side request forgery (SSRF) in Azure Data Factory allows an unauthorized attacker to disclose information over a network.

Risk Assessment

An unauthorized attacker can exploit SSRF to access internal resources and disclose sensitive data, compromising confidentiality.

Recommendation

Apply patches from Microsoft for Azure Data Factory and configure firewalls to restrict access to internal resources.

Other vulnerabilities in Azure Data Factory

Original NVD description (English source)

Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS