CVE-2026-85917
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
Server-side request forgery (SSRF) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker can exploit SSRF to access internal network resources, potentially leading to privilege escalation and security breaches.
Recommendation
It is recommended to apply patches provided by Microsoft and restrict access to Azure AI Foundry.
Other vulnerabilities in Azure AI Foundry
See all- CVE-2026-85889Critical
Missing authentication for a critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-32213Critical
Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-108456High
Server-side request forgery (SSRF) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS