Server-Side Request Forgery Vulnerability in Azure AI Search by Microsoft
CVE-2026-56167

8.5HIGH

Key Information:

Vendor

Microsoft
Status
Azure Ai Search
Vendor
CVE Published:
23 July 2026

What is CVE-2026-56167?

A server-side request forgery (SSRF) vulnerability exists in Azure AI Search, which can be exploited by an authorized attacker to gain elevated privileges within the network. This issue may lead to unauthorized access to sensitive data and resources, necessitating immediate attention and mitigation. For further details, refer to the official advisory provided by Microsoft, which outlines the necessary patches and security measures.

Affected Version(s)

Azure AI Search -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.