CVE-2026-69877

MediumCVSS 6.5

Published: 13/10/2026(UTC)Updated: 13/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

33th percentile - higher than 33% of all known CVEs

Summary

An origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.

Risk Assessment

An attacker could remotely access sensitive information by bypassing origin verification mechanisms, potentially leading to data leakage from repositories and CI/CD pipelines.

Recommendation

Review and strengthen Azure DevOps security configuration and restrict network access to trusted sources.

Other vulnerabilities in Azure DevOps

CVE-2026-42826Critical
Azure DevOps has a vulnerability that allows an unauthorized attacker to disclose sensitive information over a network.

Original NVD description (English source)

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS