10.0 CriticalCWE-200
CVE-2026-42826
Microsoft Azure DevOps vulnerability
MicrosoftAzure DevOps
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.8%probability of exploitation in the next 30 days
Higher than 58% of scored CVEs
SeverityCVSS
10.0Critical
Description NVD
Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network.
Coverage 1 article · 1 outlet
- May 2026 Patch Tuesday: 137 Vulnerabilities, No Zero-DaysSOCRadar · first in our coverage