Skip to content

CVE record · 2 sources

CVE-2026-109467

CVSS 9.9

Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.

Vendor: Microsoft
Product: Azure DevOps, Azure DevOps Server 2025
CVSS v3.1: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Weakness: CWE-287
Exposure class: Developer platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

50

CVE NVD 2h ago

Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.

Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.

CVSS 9.9 CVE-2026-109467 Microsoft
40

Advisory MSRC 5h ago

Azure DevOps Server Remote Code Execution Vulnerability

Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.

CVE-2026-109467 Microsoft