Live › vulnerability › CVE-2026-108456
Go to dashboardSSRF in the Azure AI Foundry managed service lets an authenticated low-privilege user make the service send requests to internal targets and read data across a security boundary (scope changed, high confidentiality impact). Microsoft says it has already fixed the service itself; the CVE is published for transparency.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Azure AI Foundry | vendor | unknown (cloud service) | service-side fix applied by Microsoft |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
This page as .md · .json · in your agent: get_signal("CVE-2026-108456")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.