CVE-2026-41105Disclosure(microsoft / azure_monitor_action_group_notification_system)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network.

microsoft CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41105

Weakness type (CWE)

CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

azure_monitor_action_group_notification_system

Threat summary

5 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-05-10); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

microsoft

Products

azure_monitor_action_group_notification_system

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 4d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-08	1	Disclosure1
2026-05-10	2	Disclosure2
2026-05-12	1	Disclosure1
2026-05-13	1	General1

Full discourse5 posts

CVE@CVEnew154d
Disclosure
CVE-2026-41105 Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network. https://www.cve.org/CVERecord?id=CVE-2026-41105
Post summary
The post discloses a server‑side request forgery vulnerability in Azure Notification Service that permits authorized attackers to elevate privileges across the network.
00020273
57.8K followersView on X
kawn@kawn2020152d
General
#windowsupdate #microsoft つづき・CVE-2026-34327　8.2　Microsoft パートナーセンター・CVE-2026-35428　9.6　Azure Cloud Shell ・CVE-2026-40379　9.3　Azure Entra ID ・CVE-2026-41105　8.1　Azure 通知サービス・CVE-2026-42826　10 　Azure DevOps
Post summary
The tweet enumerates several newly disclosed Microsoft Azure-related CVEs with severity scores, but provides no additional technical details, exploit references, or patch information.
10000111
85 followersView on X
Aakash Rahsi@rahsi_aaka152d
Disclosure
CVE-2026-41105 | Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability | Rahsi Framework™ Analysis https://www.aakashrahsi.online/post/cve-2026-41105 https://t.co/NqqAePLeyt
Post summary
The post announces a newly identified elevation of privilege vulnerability in Azure Monitor's Action Group Notification System, but provides no PoC, exploit, or patch details.
0000035
1 followersView on X
Infoflowcloud@infoflowcloud154d
Disclosure
🚨*CVE* CVE-2026-41105 Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network. https://www.cve.org/CVERecord?id=CVE-2026-41105 ----- Traducción: CVE-2026-41105: solicitud entre sitios (SSRF) del serv… http://infoflow.cloud`
Post summary
CVE‑2026‑41105 is a newly disclosed SSRF vulnerability in Azure Notification Service that can be exploited by an authorized user to elevate privileges across the network.
0000027
76 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds156d
Disclosure
CVE-2026-41105 Server-Side Request Forgery in Azure Notification Service Enables Privilege Escalation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41105
Post summary
A new CVE, CVE-2026-41105, identifies a Server‑Side Request Forgery vulnerability in Azure Notification Service that can lead to privilege escalation; no PoC, exploit, or patch is discussed.
0000044
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	azure_monitor_action_group_notification_system	-	-	-

Explore more

Back to dashboard microsoft CVEs azure_monitor_action_group_notification_system vulnerabilities

What researchers are saying

CVE-2026-41105

CVE@CVEnewDisclosure

The post discloses a server‑side request forgery vulnerability in Azure Notification Service that permits authorized attackers to elevate privileges across the network.

kawn@kawn2020General

The tweet enumerates several newly disclosed Microsoft Azure-related CVEs with severity scores, but provides no additional technical details, exploit references, or patch information.

Aakash Rahsi@rahsi_aakaDisclosure

The post announces a newly identified elevation of privilege vulnerability in Azure Monitor's Action Group Notification System, but provides no PoC, exploit, or patch details.

Infoflowcloud@infoflowcloudDisclosure

CVE‑2026‑41105 is a newly disclosed SSRF vulnerability in Azure Notification Service that can be exploited by an authorized user to elevate privileges across the network.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A new CVE, CVE-2026-41105, identifies a Server‑Side Request Forgery vulnerability in Azure Notification Service that can lead to privilege escalation; no PoC, exploit, or patch is discussed.