Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-03 | 5 | Disclosure3General2 |
| 2026-04-07 | 2 | Disclosure1Patch1 |
CVE-2026-26135 · NIST 9.6/10 https://nvd.nist.gov/vuln/detail/CVE-2026-26135
Post summary
A new vulnerability, CVE-2026-26135, has been disclosed with a high severity rating of 9.6/10 on NIST. The provided link directs to the NVD entry for further details.
#Microsoft released Security Update to address an Elevation of Privilege Vulnerability in Microsoft Azure Custom Locations Resource Provider. #CVE-2026-26135 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26135
Post summary
Microsoft has issued a security update for CVE‑2026‑26135, addressing an elevation‑of‑privilege flaw in the Azure Custom Locations Resource Provider.
CVE-2026-26135 Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network. https://www.cve.org/CVERecord?id=CVE-2026-26135
Post summary
A new SSRF vulnerability (CVE-2026-26135) in Azure Custom Locations Resource Provider could enable an authorized attacker to elevate privileges across the network.
⚡ New CVE Alert: CVE-2026-26135 📊 Severity: 9.6 🚨 Risk Level: Critical 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-26135 #CVE-2026-26135 #CVE #Critical #CyberSecurity #InfoSec https://t.co/bcOJmaTLlG
Post summary
The tweet announces CVE-2026-26135 with a severity rating of 9.6 but provides no technical details, PoC, or mitigation information.
🔴 CVE-2026-26135 - Critical Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network. https://www.thehackerwire.com/vulnerability/CVE-2026-26135/ https://t.co/zXIxWu7PPm
Post summary
A newly disclosed Azure SSRF vulnerability (CVE-2026-26135) that enables privilege escalation, presented with basic technical details but lacking exploit code or mitigation advice.
Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability CVE: CVE-2026-26135 PT ID: PT-2026-29902 Vendor: Microsoft Product: Azure Custom Locations Resource Provider CVSS: 9.6 Credits: n/a Description: Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-26135 • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26135 #dbugs_vuln
Post summary
An Azure Custom Locations Resource Provider vulnerability (CVE-2026-26135) with SSRF-based privilege escalation is documented, but no PoC, exploit, or patch details are provided.
[CVE-2026-26135: CRITICAL] Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.#cve,CVE-2026-26135,#cybersecurity https://cvefind.com/CVE-2026-26135
Post summary
A critical server‑side request forgery vulnerability in Azure Custom Locations Resource Provider that allows authorized attackers to elevate privileges over a network has been disclosed.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | azure_custom_locations_resource_provider | - | - | - |