Description
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
Published: 2026-07-23
Score: 8.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 24 Jul 2026 03:30:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft azure Ai Search
Vendors & Products Microsoft azure Ai Search

Fri, 24 Jul 2026 00:30:00 +0000

Type Values Removed Values Added
Description Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
Title Azure AI Search Elevation of Privilege Vulnerability
First Time appeared Microsoft
Microsoft azure Ai Search
Weaknesses CWE-918
CPEs cpe:2.3:a:microsoft:azure_AI_search:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft azure Ai Search
References
Metrics cvssV3_1

{'score': 8.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C'}

Subscriptions

Microsoft Azure Ai Search Azure Ai Search
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-07-24T19:30:43.631Z

Reserved: 2026-06-19T13:53:31.989Z

Link: CVE-2026-56167

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-24T03:15:02Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)