CVE-2026-26135 Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability
Posted: Thu Apr 02, 2026 3:00 pm
Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.
Source: https://msrc.microsoft.com/update-guide ... 2026-26135
Source: https://msrc.microsoft.com/update-guide ... 2026-26135