CVE-2026-26120Disclosure(microsoft / bing)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch microsoft bing systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26120

Weakness type (CWE)

CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

bing

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-03-24); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

microsoft

Products

bing

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-22	1	Disclosure1
2026-03-24	2	Disclosure1General1
2026-03-26	1	Disclosure1

Full discourse4 posts

kawn@kawn2020199d
Disclosure
#securityupdate #microsoft #定例外 2026. 3.19 Microsoft Bing の改ざんの脆弱性 CVE-2026-26120 Security Vulnerability リリース日: - マイクロソフト https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26120
Post summary
The tweet announces Microsoft Bing tampering vulnerability CVE‑2026‑26120 and links to the Microsoft advisory, but does not provide PoC, exploit, or concrete vulnerability details.
1010062
88 followersView on X
kawn@kawn2020199d
General
#securityupdate #microsoft #定例外 CVE-2026-26120 Security Vulnerability 影響: 改ざん最大深刻度: 緊急 CVSS:3.1 6.5 / 5.9 悪用可能性・一般に公開: No ・悪用: No ・Exploitability assessment: 対象外 https://x.com/kawn2020/status/2036264351963947329
Post summary
The tweet reports a Microsoft vulnerability (CVE-2026-26120) with severity details but indicates no public or active exploitation, yet no patches or exploitation code are discussed.
1000029
88 followersView on X
Aakash Rahsi@rahsi_aaka197d
Disclosure
CVE-2026-26120 | Microsoft Bing Tampering Vulnerability https://www.aakashrahsi.online/post/cve-2026-26120 https://t.co/3twYE3X2eA
Post summary
The text announces CVE‑2026‑26120 as a Microsoft Bing tampering vulnerability, but provides no PoC, exploit details, or remediation information.
0000026
1 followersView on X
CVE@CVEnew201d
Disclosure
CVE-2026-26120 Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network. https://www.cve.org/CVERecord?id=CVE-2026-26120
Post summary
The text reports a Server‑side Request Forgery vulnerability (CVE‑2026‑26120) in Microsoft Bing that allows unauthorized network tampering, without mentioning PoC, exploit code, or a patch.
00000186
56.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	bing	-	-	-

Explore more

Back to dashboard microsoft CVEs bing vulnerabilities

What researchers are saying

CVE-2026-26120

kawn@kawn2020Disclosure

The tweet announces Microsoft Bing tampering vulnerability CVE‑2026‑26120 and links to the Microsoft advisory, but does not provide PoC, exploit, or concrete vulnerability details.

kawn@kawn2020General

The tweet reports a Microsoft vulnerability (CVE-2026-26120) with severity details but indicates no public or active exploitation, yet no patches or exploitation code are discussed.

Aakash Rahsi@rahsi_aakaDisclosure

The text announces CVE‑2026‑26120 as a Microsoft Bing tampering vulnerability, but provides no PoC, exploit details, or remediation information.

CVE@CVEnewDisclosure

The text reports a Server‑side Request Forgery vulnerability (CVE‑2026‑26120) in Microsoft Bing that allows unauthorized network tampering, without mentioning PoC, exploit code, or a patch.