msmcp-azure vulnerabilities

CVEs whose affected-version data names the msmcp-azure package (nuget). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-26118High· 8.8PoC

Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

▾ MidnightAzure · Azure.McpEPSS 0.96%via OSV

msmcp-azure vulnerabilities (CVEs) · VulnSea