CVE-2026-26150Disclosure(microsoft / purview_ediscovery)

LOWCVSS 10.0 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.

microsoft CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26150

Weakness type (CWE)

CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

purview_ediscovery

Threat summary

6 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 5 signals
Disclosure: 5 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-04-25); latest day: 2
6 total mentions across 4 days

Affected systems

Vendors

microsoft

Products

purview_ediscovery

1 version affected across 1 product

Deep dive

Activity timeline6 mentions / 4d

Signal classification2 categories

Disclosure

583.3%

General

116.7%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-24	1	Disclosure1
2026-04-25	2	Disclosure2
2026-04-26	1	Disclosure1
2026-04-27	2	Disclosure1General1

Full discourse6 posts

kawn@kawn2020166d
Disclosure
#securityupdate #microsoft #定例外 2026. 4.23 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability CVE-2026-26150 Security Vulnerability リリース日: - マイクロソフト https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26150
Post summary
Microsoft announced CVE-2026-26150, an elevation‑of‑privilege vulnerability in Microsoft Purview eDiscovery, and provided a link to the official Microsoft advisory.
1010095
85 followersView on X
kawn@kawn2020166d
General
#securityupdate #microsoft #定例外 CVE-2026-26150 「脆弱性を解決するために、お客様が取るべきアクションはありません」影響: 特権の昇格最大深刻度: 緊急 CVSS:3.1 8.6 / 7.5 悪用可能性・一般に公開: No ・悪用: No ・Exploitability assessment: 対象外 https://x.com/kawn2020/status/2048671005368111324
Post summary
The tweet announces CVE-2026-26150, a privilege‑escalation vulnerability, but notes no customer action or patch is required and no exploitation is currently observed.
1000051
85 followersView on X
cybersecuritypath@cybrsecpath167d
Disclosure
CVE-2026-26150: Microsoft Purview SSRF Flaw Rated Critical https://thecybrdef.com/cve-2026-26150-microsoft-purview-ssrf-vulnerability/ #CVE202626150 #MicrosoftPurview #CyberSecurity
Post summary
A new Microsoft Purview SSRF vulnerability (CVE-2026-26150) is highlighted as critical, but no evidence of exploitation, PoC, patch, or active attacks is provided.
0000043
7 followersView on X
CVE@CVEnew167d
Disclosure
CVE-2026-26150 Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. https://www.cve.org/CVERecord?id=CVE-2026-26150
Post summary
The post announces CVE-2026-26150, detailing it as an SSRF flaw in Microsoft Purview that allows elevation of privileges across the network.
00000126
57.3K followersView on X
cybersecuritypath@cybrsecpath168d
Disclosure
CVE-2026-26150: Microsoft Purview SSRF Flaw Rated Critical https://thecybrdef.com/cve-2026-26150-microsoft-purview-ssrf-vulnerability/ #CVE202626150 #MicrosoftPurview #CyberSecurity
Post summary
The tweet announces a critical SSRF flaw in Microsoft Purview (CVE-2026-26150) and links to an external article, providing only basic technical details without any exploitation or mitigation information.
0000055
6 followersView on X
Aakash Rahsi@rahsi_aaka169d
Disclosure
CVE-2026-26150 | Microsoft Purview eDiscovery Elevation of Privilege Vulnerability https://www.aakashrahsi.online/post/cve-2026-26150 https://t.co/ibVrLcUewr
Post summary
The message announces a new privilege‑escalation vulnerability (CVE‑2026‑26150) in Microsoft Purview eDiscovery, providing only basic technical labeling and a link to a blog post.
0000029
1 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	purview_ediscovery	-	-	-

Explore more

Back to dashboard microsoft CVEs purview_ediscovery vulnerabilities

What researchers are saying

CVE-2026-26150

kawn@kawn2020Disclosure

Microsoft announced CVE-2026-26150, an elevation‑of‑privilege vulnerability in Microsoft Purview eDiscovery, and provided a link to the official Microsoft advisory.

kawn@kawn2020General

The tweet announces CVE-2026-26150, a privilege‑escalation vulnerability, but notes no customer action or patch is required and no exploitation is currently observed.

cybersecuritypath@cybrsecpathDisclosure

A new Microsoft Purview SSRF vulnerability (CVE-2026-26150) is highlighted as critical, but no evidence of exploitation, PoC, patch, or active attacks is provided.

CVE@CVEnewDisclosure

The post announces CVE-2026-26150, detailing it as an SSRF flaw in Microsoft Purview that allows elevation of privileges across the network.

cybersecuritypath@cybrsecpathDisclosure

The tweet announces a critical SSRF flaw in Microsoft Purview (CVE-2026-26150) and links to an external article, providing only basic technical details without any exploitation or mitigation information.

Aakash Rahsi@rahsi_aakaDisclosure

The message announces a new privilege‑escalation vulnerability (CVE‑2026‑26150) in Microsoft Purview eDiscovery, providing only basic technical labeling and a link to a blog post.