CVE-2026-26135
CRITICAL
NVD
CVSS Score
9.6
Severity
CRITICAL
Published
Apr 03, 2026
Vendor
unknown
Description
Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.