CVE-2026-69851
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Server-side request forgery (SSRF) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An authorized attacker can exploit SSRF to access internal resources and elevate privileges, potentially leading to system compromise.
Recommendation
Apply security patches from Microsoft for Azure Active Directory and monitor network traffic for suspicious requests.
Other vulnerabilities in Azure Active Directory
See all- CVE-2026-50481Critical
Modification of assumed-immutable data (MAID) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
- CVE-2026-45480Critical
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-50653High
An infinite loop in Azure Active Directory allows an unauthorized attacker to deny service over a network.
- CVE-2026-50652High
In Azure Active Directory, a deserialization of untrusted data vulnerability allows an unauthorized attacker to perform a denial of service (DoS) attack over the network.
- CVE-2023-36871Medium
A vulnerability in Azure Active Directory allows for a security feature bypass, potentially leading to unauthorized access to resources.
Original NVD description (English source)
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS