Azure AI Foundry
Records
4
Disclosed CVEs
4
Exploited (sev 3–4)
0
CISA KEV flagged
0
Newest record 2026-09-17 · 4 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Patch now: confirmed exploitation or KEV · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for Azure AI Foundry has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
▄▄ █
Nov ’244 disclosed · peak 2 in Sep ’26Oct ’26
Disclosed CVEs, no confirmed exploitation · 4
- 2026-09-17CVE-2026-85917CVE-2026-85917: Server-side request forgery in Azure AI Foundry2 Disclosedssrf · privilege-escalation
- 2026-09-17CVE-2026-85889CVE-2026-85889: Missing authentication vulnerability in Azure AI Foundry2 Disclosedazure · microsoft · privilege-escalation
- 2026-05-07CVE-2026-35435CVE-2026-35435: Improper access control in Azure AI Foundry M365 published agents2 Disclosedprivilege_escalation
- 2026-04-03CVE-2026-32213CVE-2026-32213: Improper authorization vulnerability in Azure AI Foundry2 Disclosedprivilege-escalation
This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.