CVE-2026-32211

Published: Apr 03, 2026 Last Modified: Apr 03, 2026

ExploitDB:

Other exploit source:

Google Dorks:

CRITICAL 9,1

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: none

AI Translation Available

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.

306

Draft

Abstraction: Base Structure: Simple

Security Scopes Affected:

Access Control Other

Potential Impacts:

Gain Privileges Or Assume Identity Varies By Context

Technologies: Cloud Computing, ICS/OT

Likelihood of Exploit: High

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32211